CVE-2022-50827 scsi: lpfc: Fix memory leak in lpfc_create_port()

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfccreateport Commit 5e633302ace1 "scsi: lpfc: vmid: Add support for VMID in mailbox command" introduced allocations for the VMID resources in lpfccreateport after the call to scsihostalloc. Upon...

CVE-2022-50827 scsi: lpfc: Fix memory leak in lpfc_create_port()

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfccreateport Commit 5e633302ace1 "scsi: lpfc: vmid: Add support for VMID in mailbox command" introduced allocations for the VMID resources in lpfccreateport after the call to scsihostalloc. Upon...

CVE-2022-50826 ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection()

In the Linux kernel, the following vulnerability has been resolved: ipu3-imgu: Fix NULL pointer dereference in imgusubdevsetselection Calling v4l2subdevgettrycrop and v4l2subdevgettrycompose with a subdev state of NULL leads to a NULL pointer dereference. This can currently happen in...

CVE-2022-50819 udmabuf: Set ubuf->sg = NULL if the creation of sg table fails

In the Linux kernel, the following vulnerability has been resolved: udmabuf: Set ubuf-sg = NULL if the creation of sg table fails When userspace tries to map the dmabuf and if for some reason e.g. OOM the creation of the sg table fails, ubuf-sg needs to be set to NULL. Otherwise, when the userspa...

CVE-2022-50818 scsi: pm8001: Fix running_req for internal abort commands

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix runningreq for internal abort commands Disabling the remote phy for a SATA disk causes a hang: root@none$ more /sys/class/sasphy/phy-0:0:8/targetportprotocols sata root@none$ echo 0...

CVE-2022-50816

CVE-2022-50816 affects the Linux kernel IPv6 tunneling MTU handling. Root cause: a layer could set dev->mtu to an underflowed value due to insufficient sanitization when updating MTU for ip6_gre/ip6_tnl/ipip6 tunnels. Impact described in the sources includes potential invalid skb handling and ...

CVE-2022-50811

CVE-2022-50811 concerns the Linux kernel erofs code. The connected sources confirm a concrete fix: when z_erofs_get_extent_compressedlen() fails, there is a missing unmap that could allow leakage of meta buffers. The remediation is a kernel patch implemented in the erofs path to ensure proper unm...

CVE-2022-50811 erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if zerofsgetextentcompressedlen fails Otherwise, meta buffers could be leaked...

CVE-2022-50810

CVE-2022-50810 (Linux kernel, rapidio devices) : The issue arises in mport_cdev_open where a missing put_device call leaves the reference count of chdev->dev incremented when kfifo_alloc fails, causing a refcount leak. The vulnerability is limited to the rapidio device code path; no exploitati...

PT-2025-54096

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc3 Description The Linux kernel contains an issue in the powerpc/pseries subsystem related to the lppaca shared proc function. When DEBUG PREEMPT is enabled, accessing the lppaca pointer within this functi...

PT-2025-53993

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Bluetooth ISO Isochronous connections. Specifically, the issue involves incorrect locking and validity checks concerning the sk state variable...

PT-2025-54085

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: don't reset device side if dwc3 was configured as host-only Commit c4a5153e87fd "usb: dwc3: core: Power-off core/PHYs on system suspend in host mode" replaces check for HOST only dr mode with current dr role. But durin...

PT-2025-54148

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a data race condition within the RDMA/irdma subsystem, specifically concerning CQP Completion Queue Pair completion statistics. The issue arises because...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992360 advisory. In the Linux kernel, the following vulnerability has been resolved: kcm: annotate data-races around kcm-rxwait kcm-rxpsock can be read locklessly in kcmrfree. Annota...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992535 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix memleak in aasimplewritetobuffer When copyfromuser failed, the memory is freed by...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992174 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix null-ptr-deref in ext4writeinfo I caught a null-ptr-deref bug as follows:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992222)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992222 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning If getnumsdmaqueues or getnumxgmisdmaqueues is ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992400)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992400 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992539)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992539 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref of mreplace in raid10syncrequest There are two check of 'mreplace' ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992397 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are...