kernel: media: uvcvideo: Fix memory leak in uvc_gpio_parse

A memory leak was found in the UVC video driver's GPIO parsing code. When IRQ acquisition fails for a privacy GPIO, the previously allocated unit buffer is not freed, causing a memory leak...

kernel: gpiolib: cdev: fix NULL-pointer dereferences

In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix NULL-pointer dereferences There are several places where we can crash the kernel by requesting lines, unbinding the GPIO device, then calling any of the system calls relevant to the GPIO character device's...

kernel: media: uvcvideo: Fix memory leak in uvc_gpio_parse

A memory leak was found in the UVC video driver's GPIO parsing code. When IRQ acquisition fails for a privacy GPIO, the previously allocated unit buffer is not freed, causing a memory leak...

PT-2025-40138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to GPIO character device handling. Specifically, a NULL-pointer dereference can occur when requesting lines, unbinding the GPIO device, and then...

chai (=4.0.0-canary.1), chai-project (=1.0.0) +2 more potentially affected by CVE-2023-43646 via get-func-name (>=1.0.0 <=2.0.0)

get-func-name NPM version =1.0.0, =1.0.1, =1.0.0, =1.0.4 Source cves: CVE-2023-43646 Source advisory: OSV:GHSA-4Q6P-R6V2-JVC5...

Unbreakable Enterprise kernel security update

5.15.0-8.91.4.1 - uek-rpm: Add opbmc to core rpm Somasundaram Krishnasamy Orabug: 35157130 5.15.0-8.91.4 - selftests/vm: remove ARRAYSIZE define from individual tests Shuah Khan Orabug: 35088471 - selftests: Provide local define of cpuidcount Reinette Chatre Orabug: 35088471 - tools: fix ARRAYSIZ...

In the Linux kernel before 5.16.3 drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error case whereas it is actually an error pointer).

...

GSD-2023-1002309 gpio: sim: fix a memory leak

gpio: sim: fix a memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.13 by commit 854e1ecff266033d3149666d3c5b8b0e174b4210, it was...

PT-2023-9771 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the Linux kernel's sim component, specifically in the gpio sim remove hogs function. This is due to an inverted logic bug that prevents GPIO ho...

SUSE CVE-2013-4540

Buffer overflow in scoopgpiohandlerupdate in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large 1 prevlevel, 2 gpiolevel, or 3 gpiodir value in a savevm image...

SUSE CVE-2014-9940

The regulatorenagpiofree function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of service use-after-free via a crafted application...

SUSE CVE-2019-19070

A memory leak in the spigpioprobe function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering devmaddactionorreset failures, aka CID-d3b0ffa1d75d. NOTE: third parties dispute the relevance of this because the...

SUSE CVE-2021-26375

Insufficient General Purpose IO GPIO bounds check in System Management Unit SMU may result in access/updates from/to invalid address space that could result in denial of service...

PT-2025-53195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The GPIO controller component of the sc16is7xx driver is initialized prematurely, leading to a potential race condition. This occurs when another device attempts to utilize GPIO lines...

GSD-2023-1001469 Input: elants_i2c - properly handle the reset GPIO when power is off

Input: elantsi2c - properly handle the reset GPIO when power is off This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001245 gpio: sifive: Fix refcount leak in sifive_gpio_probe

gpio: sifive: Fix refcount leak in sifivegpioprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1000877 gpio: sifive: Fix refcount leak in sifive_gpio_probe

gpio: sifive: Fix refcount leak in sifivegpioprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000768 Input: elants_i2c - properly handle the reset GPIO when power is off

Input: elantsi2c - properly handle the reset GPIO when power is off This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000323 gpio: amd8111: Fix PCI device reference count leak

gpio: amd8111: Fix PCI device reference count leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.269 by commit...

GSD-2023-1000216 gpio: amd8111: Fix PCI device reference count leak

gpio: amd8111: Fix PCI device reference count leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.159 by commit...