UBUNTU-CVE-2022-50704

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix use-after-free during usb config switch In the process of switching USB config from rndis to other config, if the hardware does not support the -pullup callback, or the hardware encounters a low probability fault...

CVE-2023-54002

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion of exclop condition when starting balance Balance as exclusive state is compatible with paused balance and device add, which makes some things more complicated. The assertion of valid states when starting fro...

UBUNTU-CVE-2023-53995

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix one memleak in inetdelifa I got the below warning when do fuzzing test: unregisternetdevice: waiting for bond0 to become free. Usage count = 2 It can be repoduced via: ip link add bond0 type bond sysctl -w...

UBUNTU-CVE-2025-68358

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix racy bitfield write in btrfsclearspaceinfofull From the memory-barriers.txt document regarding memory barrier ordering guarantees: These guarantees do not apply to bitfields, because compilers often generate code to...

UBUNTU-CVE-2023-54023

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between balance and cancel/pause Syzbot reported a panic that looks like this: assertion failed: fsinfo-exclusiveoperation == BTRFSEXCLOPBALANCEPAUSED, in fs/btrfs/ioctl.c:465 ------------ cut here ------------...

CVE-2025-68734

The CVE-2025-68734 in the Linux kernel affects isdn/mISDN hfcsusb, where a memory leak in hfcsusb_probe() was fixed by freeing the allocated ctrl_urb before freeing the hw structure when setup_instance() fails, and by restructuring error paths to use a goto ladder. The issue has been acknowledged...

CVE-2023-54021

CVE-2023-54021 affects the Linux kernel ext4 subsystem. The vulnerability centers on ext4_mb_normalize_request: the code must use ac_g_ex (not ac_f_ex) to communicate the goal start to ext4_mb_find_by_goal, and verify that the goal start lies within the data block range [first_data_block, blocks_...

CVE-2023-54016 wifi: ath12k: Fix memory leak in rx_desc and tx_desc

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix memory leak in rxdesc and txdesc Currently when ath12kdpccdescinit is called we allocate memory to rxdescs and txdescs. In ath12kdpcccleanup, during descriptor cleanup rxdescs and txdescs memory is not freed. Th...

CVE-2023-54006

CVE-2023-54006 affects the Linux kernel af_unix path. It is a data race where unix_tot_inflight is written under a spin_lock but read locklessly by unix_release_sock; the fix is to use READ_ONCE() for unix_tot_inflight. The description (and multiple advisories) indicate a KCSAN-detected race betw...

CVE-2023-54006 af_unix: Fix data-race around unix_tot_inflight.

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix data-race around unixtotinflight. unixtotinflight is changed under spinlockunixgclock, but unixreleasesock reads it locklessly. Let's use READONCE for unixtotinflight. Note that the writer side was marked by commit...

CVE-2023-54006 af_unix: Fix data-race around unix_tot_inflight.

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix data-race around unixtotinflight. unixtotinflight is changed under spinlockunixgclock, but unixreleasesock reads it locklessly. Let's use READONCE for unixtotinflight. Note that the writer side was marked by commit...

CVE-2023-54003

CVE-2023-54003 is a Linux kernel vulnerability where, if an AH create request fails, sgid_attr is not released, causing a GID entry reference leak in RDMA/core when releasing the GID table. Connected advisories (SUSE-SU-2026:0317-1, SUSE-SU-2026:0411-1, OSV entries) confirm the issue and describe...

CVE-2023-53999 net/mlx5e: TC, Fix internal port memory leak

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Fix internal port memory leak The flow rule can be splited, and the extra postact rules are added to postact table. It's possible to trigger memleak when the rule forwards packets from internal port and over tunnel...

CVE-2023-53993

The CVE-2023-53993 issue affects the Linux kernel’s PCI/DOE path. The root cause is a memory-leak risk after a pci_doe_task completes if the associated work_struct is not destroyed when CONFIG_DEBUG_OBJECTS=y is enabled. The described fix adds a destroy step for the work_struct to prevent leaks. ...

CVE-2023-53987

In the Linux kernel, the following vulnerability has been resolved: ping: Fix potentail NULL deref for /proc/net/icmp. After commit dbca1596bbb0 "ping: convert to RCU lookups, get rid of rwlock", we use RCU for ping sockets, but we should use spinlock for /proc/net/icmp to avoid a potential NULL...

CVE-2022-50706

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2022-50698 ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()

In the Linux kernel, the following vulnerability has been resolved: ASoC: da7219: Fix an error handling path in da7219registerdaiclks If clkhwregister fails, the corresponding clk should not be unregistered. To handle errors from loops, clean up partial iterations before doing the goto. So add a...

CVE-2025-68733

CVE-2025-68733 is a Linux kernel vulnerability in the SMACK labeling feature. The issue allowed an unprivileged task that relabels itself (when /smack/relabel-self is non-empty) to create new labels by writing names into /proc/PID/attr/smack/current. Root cause: do_setattr() imported the provided...

CVE-2025-68727 ntfs3: Fix uninit buffer allocated by __getname()

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by getname Fix uninit errors caused after buffer allocation given to 'de'; by initializing the buffer with zeroes. The fix was found by using KMSAN...

CVE-2025-68379

CVE-2025-68379 affects the Linux kernel RDMA/rxe subsystem. A NULL pointer dereference can occur in rxe_srq_chk_attr() when ibv_modify_srq() is invoked twice after a resize failure: the first call may fail in rxe_queue_resize(), causing srq->rq.queue to be set to NULL, and the second call dere...