2001 matches found
UBUNTU-CVE-2022-50028
In the Linux kernel, the following vulnerability has been resolved: gadgetfs: epio - wait until IRQ finishes after usbepqueue if waitforcompletioninterruptible is interrupted we need to wait until IRQ gets finished. Otherwise complete from epiocomplete can corrupt stack...
UBUNTU-CVE-2022-50157
In the Linux kernel, the following vulnerability has been resolved: PCI: microchip: Fix refcount leak in mcpcieinitirqdomains ofgetnextchild returns a node pointer with refcount incremented, so we should use ofnodeput on it when we don't need it anymore. mcpcieinitirqdomains only calls ofnodeput ...
CVE-2022-50157
In the Linux kernel, the following vulnerability has been resolved: PCI: microchip: Fix refcount leak in mcpcieinitirqdomains ofgetnextchild returns a node pointer with refcount incremented, so we should use ofnodeput on it when we don't need it anymore. mcpcieinitirqdomains only calls ofnodeput ...
CVE-2022-50028 gadgetfs: ep_io - wait until IRQ finishes
In the Linux kernel, the following vulnerability has been resolved: gadgetfs: epio - wait until IRQ finishes after usbepqueue if waitforcompletioninterruptible is interrupted we need to wait until IRQ gets finished. Otherwise complete from epiocomplete can corrupt stack...
CVE-2022-50028
CVE-2022-50028 affects gadgetfs ep_io in the Linux kernel (drivers/usb/gadget/legacy/inode.c). After usb_ep_queue(), if wait_for_completion_interruptible() is interrupted, code must wait for IRQ completion; otherwise epio_complete() may corrupt the stack. The vulnerability is fixed in the Linux k...
CVE-2022-50028
In the Linux kernel, the following vulnerability has been resolved: gadgetfs: epio - wait until IRQ finishes after usbepqueue if waitforcompletioninterruptible is interrupted we need to wait until IRQ gets finished. Otherwise complete from epiocomplete can corrupt stack...
CVE-2025-38040 serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
In the Linux kernel, the following vulnerability has been resolved: serial: mctrlgpio: split disablems into sync and nosync APIs The following splat has been observed on a SAMA5D27 platform using atmelserial: BUG: sleeping function called from invalid context at kernel/irq/manage.c:738 inatomic: ...
Security update for golang-github-prometheus-node_exporter
This update for golang-github-prometheus-nodeexporter fixes the following issues: golang-github-prometheus-nodeexporter was updated to version 1.9.1: Security issues fixed: CVE-2025-22870: Bumped golang.org/x/net to version 0.37.0 bsc1238686 Other bugs fixed: pressure: Fixed missing IRQ on older...
PT-2025-26069 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A resource leak issue has been identified in the Linux kernel, specifically in the intel th component. This issue arises when an error occurs after calling pci alloc irq vectors, and p...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: - drm/i915/gt: Use spinlockirqsave in interruptible contexts. - The use of spinlock/unlock functions in interrupt contexts could lead to a deadlock, as seen in GitLab issue 13399. This occurs when an interrupt arrives while a...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check the control transfer buffer size before accessing it. If the first fragment is shorter than struct usbcdcnotification, we cannot calculate the expectedsize. Instead, log an error and discard the notification...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Avoid issues related to interrupts remaining after a requestirq error. After the devmrequestirq function fails with an error in pciendpointtestrequestirq, the pciendpointtestfreeirqvectors function is calle...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fixed deadlock issue when using the NCM gadget The cdns3 driver suffers from the same deadlock issue as fixed in cdnsp with the commit 58f2fcb3a845 „usb: cdnsp: Fixed deadlock issue during use of the NCM gadget”. Unde...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Net: Ethernet: ti: am65-cpsw: Fix for freeing the IRQ in am65cpswnussremove Txchns. When obtaining the IRQ, we use k3udmagluetxgetirq, which returns a negative error value if there is an error. Therefore, checking if the IRQ is...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: irqchip/qcom-mpm: This issue prevents crashes when attempting to handle non-wake GPIOs. On Qualcomm chipsets, not all GPIOs are wake-up capable. These GPIOs do not have a corresponding MPM pin and should not be handled within the...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: i2c: npcm: Disable the interrupt enable bit before calling devmrequestirq The customer reports a soft lockup issue related to the i2c driver. After checking, it was found that the i2c module was performing a transmission operatio...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fixed a crash that occurred during unbinding of the device if the gpio unit is in use. We used the wrong device for the functions that manage the device. Instead of using the USB device, we should have used the...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: Correctly handling the free irq in the remove path Added a check for fsledma-txirq/errirq to avoid the following warning, as there is no errirq on the i.MX9 platform. Otherwise, a kernel dump will occur:...
Vulnerabilities in the dump_syn_reg(), llcc_ecc_irq_handler(), and qcom_llcc_edac_probe() functions of the Linux operating system’s kernel, allowing attackers to cause system failures
The vulnerabilities of the dumpsynreg, llcceccirqhandler, and qcomllccedacprobe functions in the Linux operating system’s kernel are related to the use of memory after it has been freed. Exploiting these vulnerabilities could allow an attacker to cause a service failure...
PT-2025-30774
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The OP-TEE driver registers the notif callback function for FF-A notifications. This function is called in an atomic context, which can lead to errors when processing asynchronous...