SUSE CVE-2022-50577

In the Linux kernel, the following vulnerability has been resolved: ima: Fix memory leak in imainodehash Commit f3cc6b25dcc5 "ima: always measure and audit files in policy" lets measurement or audit happen even if the file digest cannot be calculated. As a result, iint-imahash could have been...

EUVD-2023-60002

In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fix OoB access in IP checksum code for negative lengths Although commit c2c24edb1d9c "arm64: csum: Fix pathological zero-length calls" added an early return for zero-length input, syzkaller has popped up with an...

EUVD-2022-55666

In the Linux kernel, the following vulnerability has been resolved: tpm: acpi: Call acpiputtable to fix memory leak The start and length of the event log area are obtained from TPM2 or TCPA table, so we call acpigettable to get the ACPI information, but the acpigettable should be coupled with...

UBUNTU-CVE-2022-50557

In the Linux kernel, the following vulnerability has been resolved: pinctrl: thunderbay: fix possible memory leak in thunderbaybuildfunctions The thunderbayaddfunctions will free memory of thunderbayfuncs when everything is ok, but thunderbayfuncs will not be freed when thunderbayaddfunctions...

CVE-2023-53728

The CVE affects the Linux kernel’s posix-timers path, where posix_timer_add() allocates timer IDs by scanning from a cached, last-allocation ID. The loop that searches for a free ID is not properly synchronized with the starting value, because start is read locklessly while the hash lock is acqui...

CVE-2023-53724 mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()

In the Linux kernel, the following vulnerability has been resolved: mfd: pcf50633-adc: Fix potential memleak in pcf50633adcasyncread req is allocated in pcf50633adcasyncread, but adcenqueuerequest could fail to insert the req into queue. We need to check the return value and free it in the case o...

CVE-2023-53720 net/mlx5e: Release the label when replacing existing ct entry

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Release the label when replacing existing ct entry Cited commit doesn't release the label mapping when replacing existing ct entry which leads to following memleak report: unreferenced object 0xffff8881854cf280 size 96...

CVE-2023-53720 net/mlx5e: Release the label when replacing existing ct entry

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Release the label when replacing existing ct entry Cited commit doesn't release the label mapping when replacing existing ct entry which leads to following memleak report: unreferenced object 0xffff8881854cf280 size 96...

CVE-2023-53713 arm64: sme: Use STR P to clear FFR context field in streaming SVE mode

In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode The FFR is a predicate register which can vary between 16 and 256 bits in size depending upon the configured vector length. When saving the SVE state in...

CVE-2023-53703 HID: amd_sfh: Fix for shift-out-of-bounds

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix for shift-out-of-bounds Shift operation of 'exp' and 'shift' variables exceeds the maximum number of shift values in the u32 range leading to UBSAN shift-out-of-bounds. ... 6.120512 UBSAN: shift-out-of-bounds in...

CVE-2023-53700 media: max9286: Fix memleak in max9286_v4l2_register()

In the Linux kernel, the following vulnerability has been resolved: media: max9286: Fix memleak in max9286v4l2register There is a kmemleak when testing the media/i2c/max9286.c with bpf mock device: kmemleak: 5 new suspected memory leaks see /sys/kernel/debug/kmemleak unreferenced object...

CVE-2023-53700

CVE-2023-53700: Linux kernel fix for memleak in media/max9286_v4l2_register(). The root cause is failure to free the v4l2_ctrl created by v4l2_ctrl_new_std() when fwnode_graph_get_endpoint_by_id() fails, causing a memory leak observed via kmemleak. The recommended remediation is to call v4l2_ctrl...

CVE-2022-50579 arm64: ftrace: fix module PLTs with mcount

In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: fix module PLTs with mcount Li Huafei reports that mcount-based ftrace with module PLTs was broken by commit: a6253579977e4c6f "arm64: ftrace: consistently handle PLTs." When a module PLTs are used and a module is...

CVE-2022-50562

CVE-2022-50562 : In the Linux kernel, the TPM ACPI path leaked memory because acpi_get_table() was not paired with acpi_put_table(). The fix adds acpi_put_table() to release ACPI memory and also removes a redundant empty line in tpm_read_log_acpi(). This resolves a memory leak in the TPM2/TCPA ev...

CVE-2022-50562 tpm: acpi: Call acpi_put_table() to fix memory leak

In the Linux kernel, the following vulnerability has been resolved: tpm: acpi: Call acpiputtable to fix memory leak The start and length of the event log area are obtained from TPM2 or TCPA table, so we call acpigettable to get the ACPI information, but the acpigettable should be coupled with...

CVE-2022-50561 iio: fix memory leak in iio_device_register_eventset()

In the Linux kernel, the following vulnerability has been resolved: iio: fix memory leak in iiodeviceregistereventset When iiodeviceregistersysfsgroup returns failed, iiodeviceregistereventset needs to free attrs array. Otherwise, kmemleak would scan & report memory leak as below: unreferenced...

CVE-2022-50560 drm/meson: explicitly remove aggregate driver at module unload time

In the Linux kernel, the following vulnerability has been resolved: drm/meson: explicitly remove aggregate driver at module unload time Because componentmasterdel wasn't being called when unloading the mesondrm module, the aggregate device would linger forever in the global aggregatedevices list...

CVE-2022-50557

CVE-2022-50557 concerns the Linux kernel pinctrl thunderbay path, where thunderbay_add_functions() could leak memory if thunderbay_add_functions() failed to free thunderbay_funcs. The root cause was that thunderbay_funcs was freed only on success; on failure it remained allocated. A patch fixes t...

PT-2025-49058

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to a lock inversion deadlock between vsock register mutex and sk lock-AF VSOCK when the vsock linger function is called. This issue stemmed from ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987650)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987650 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: unexport init-annotated seg6hmacinit EXPORTSYMBOL and init is a bad combination becaus...