kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory

A use-after-free memory bug exists in the linux kernel, such that unpoisonmemory tries to check the PGHWPoison flags of an uninitialized page. So VMBUGONPAGEPagePoisonedpage is triggered, leading to damage to the system availability and integrity...

PT-2026-37475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the snd cx23885 hw params function. In the error path, the system fails to call cx23885 alsa dma unmap, which is necessary to release the resource previously...

PT-2026-37597

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the Linux kernel within the snd cx88 hw params function. The issue arises because the error path fails to call cx88 alsa dma unmap, which is necessary to releas...

PT-2026-2521

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ibmpex high low store function in the Linux kernel does not validate driver data retrieved using dev get drvdata. This creates a race condition where the sysfs callback can be invoke...

EUVD-2025-201865

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmacrx function would previously set skb-ipsummed to CHECKSUMUNNECESSARY if hardware checksum offload CoE was enabled and the packet was of a known IP ethertype...

CVE-2025-40337

The CVE-2025-40337 vulnerability affects the Linux kernel’s net: stmmac driver, specifically the stmmac_rx function. The issue occurred when hardware checksum offload was enabled and the packet had a known IP ethertype: skb->ip_summed could be incorrectly set to CHECKSUM_UNNECESSARY without ve...

EUVD-2022-55719

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut If "cpudev" fails to get opp table in qcomcpufreqhwreadlut, the program will return, resulting in "table" resource is not released...

DEBIAN-CVE-2022-50637

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut If "cpudev" fails to get opp table in qcomcpufreqhwreadlut, the program will return, resulting in "table" resource is not released...

UBUNTU-CVE-2023-53789

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Improve page fault error reporting If IOMMU domain for device group is not setup properly then we may hit IOMMU page fault. Current page fault handler assumes that domain is always setup and it will hit NULL pointer...

UBUNTU-CVE-2022-50637

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut If "cpudev" fails to get opp table in qcomcpufreqhwreadlut, the program will return, resulting in "table" resource is not released...

CVE-2023-53807 clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider()

In the Linux kernel, the following vulnerability has been resolved: clk: clocking-wizard: Fix Oops in clkwzrdregisterdivider Smatch detected this potential error pointer dereference clkwzrdregisterdivider. If devmclkhwregister fails then it sets "hw" to an error pointer and then dereferences it o...

CVE-2022-50637

CVE-2022-50637 concerns the Linux kernel cpufreq driver for Qualcomm hardware. The issue is a memory/resource leak in cpufreq_qcom_hw_read_lut() where if cpu_dev fails to obtain the OPP table, the function returns without releasing the allocated table resource. The vulnerability has been resolved...

CVE-2022-50637 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut If "cpudev" fails to get opp table in qcomcpufreqhwreadlut, the program will return, resulting in "table" resource is not released...

CVE-2022-50637 cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut()

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut If "cpudev" fails to get opp table in qcomcpufreqhwreadlut, the program will return, resulting in "table" resource is not released...

CVE-2022-50637

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-hw: Fix memory leak in qcomcpufreqhwreadlut If "cpudev" fails to get opp table in qcomcpufreqhwreadlut, the program will return, resulting in "table" resource is not released...

PT-2025-49690

In the Linux kernel, the following vulnerability has been resolved: hwrng: geode - Fix PCI device refcount leak for each pci dev is implemented by pci get device. The comment of pci get device says that it will increase the reference count for the returned pci dev and also decrease the reference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a geode hwrng PCI device reference count leak...

PT-2025-49671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The irdma driver within the Linux kernel could use a number of MSIX vectors exceeding the number of online CPUs plus one. This resulted in a kernel warning when attempting to update the...

Breaking ECDSA with Electromagnetic Side-Channel Attacks: Challenges and Practicality on Modern Smartphones

Smartphones handle sensitive tasks such as messaging and payment and may soon support critical electronic identification through initiatives such as the European Digital Identity EUDI wallet, currently under development. Yet the susceptibility of modern smartphones to physical side-channel analys...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the hwq-cqlock deadlock issue, which could cause the system to hang...