264 matches found
DEBIAN-CVE-2022-49820
In the Linux kernel, the following vulnerability has been resolved: mctp i2c: don't count unused / invalid keys for flow release We're currently hitting the WARNON in mctpi2cflowrelease: if midev-releasecount midev-i2clockcount WARNONCE1, "release count overflow"; This may be hit if we expire a...
CVE-2022-49820
In the Linux kernel, the following vulnerability has been resolved: mctp i2c: don't count unused / invalid keys for flow release We're currently hitting the WARNON in mctpi2cflowrelease: if midev-releasecount midev-i2clockcount WARNONCE1, "release count overflow"; This may be hit if we expire a...
UBUNTU-CVE-2022-49820
In the Linux kernel, the following vulnerability has been resolved: mctp i2c: don't count unused / invalid keys for flow release We're currently hitting the WARNON in mctpi2cflowrelease: if midev-releasecount midev-i2clockcount WARNONCE1, "release count overflow"; This may be hit if we expire a...
UBUNTU-CVE-2022-49854
In the Linux kernel, the following vulnerability has been resolved: mctp: Fix an error handling path in mctpinit If mctpneighinit return error, the routes resources should be released in the error handling path. Otherwise some resources leak...
UBUNTU-CVE-2025-37790
In the Linux kernel, the following vulnerability has been resolved: net: mctp: Set SOCKRCUFREE Bind lookup runs under RCU, so ensure that a socket doesn't go away in the middle of a lookup...
CVE-2022-49854
CVE-2022-49854 concerns the Linux kernel: a resource leak in the mctp_init() error path when mctp_neigh_init() returns an error. The issue is resolved by ensuring route resources are released in the error handling path, preventing leaks. Affected component: mctp subsystem in the kernel; impact is...
CVE-2022-49854 mctp: Fix an error handling path in mctp_init()
In the Linux kernel, the following vulnerability has been resolved: mctp: Fix an error handling path in mctpinit If mctpneighinit return error, the routes resources should be released in the error handling path. Otherwise some resources leak...
CVE-2022-49854 mctp: Fix an error handling path in mctp_init()
In the Linux kernel, the following vulnerability has been resolved: mctp: Fix an error handling path in mctpinit If mctpneighinit return error, the routes resources should be released in the error handling path. Otherwise some resources leak...
CVE-2022-49854 mctp: Fix an error handling path in mctp_init()
In the Linux kernel, the following vulnerability has been resolved: mctp: Fix an error handling path in mctpinit If mctpneighinit return error, the routes resources should be released in the error handling path. Otherwise some resources leak...
CVE-2022-49854
In the Linux kernel, the following vulnerability has been resolved: mctp: Fix an error handling path in mctpinit If mctpneighinit return error, the routes resources should be released in the error handling path. Otherwise some resources leak...
CVE-2022-49820 mctp i2c: don't count unused / invalid keys for flow release
In the Linux kernel, the following vulnerability has been resolved: mctp i2c: don't count unused / invalid keys for flow release We're currently hitting the WARNON in mctpi2cflowrelease: if midev-releasecount midev-i2clockcount WARNONCE1, "release count overflow"; This may be hit if we expire a...
CVE-2022-49820 mctp i2c: don't count unused / invalid keys for flow release
In the Linux kernel, the following vulnerability has been resolved: mctp i2c: don't count unused / invalid keys for flow release We're currently hitting the WARNON in mctpi2cflowrelease: if midev-releasecount midev-i2clockcount WARNONCE1, "release count overflow"; This may be hit if we expire a...
CVE-2022-49820
CVE-2022-49820 concerns the Linux kernel mctp i2c flow release logic. The issue arises when release_count > i2c_lock_count, triggering a WARN_ONCE due to expiring a flow before sending the first packet and not pairing the release increment with the i2c lock operation. The fix adds a guard: onl...
CVE-2022-49820
In the Linux kernel, the following vulnerability has been resolved: mctp i2c: don't count unused / invalid keys for flow release We're currently hitting the WARNON in mctpi2cflowrelease: if midev-releasecount midev-i2clockcount WARNONCE1, "release count overflow"; This may be hit if we expire a...
CVE-2025-37790
In the Linux kernel, the following vulnerability has been resolved: net: mctp: Set SOCKRCUFREE Bind lookup runs under RCU, so ensure that a socket doesn't go away in the middle of a lookup...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from mctp not setting SOCKRCUFREE...
PT-2025-18537
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the mctp i2c module. The issue arises when a flow is released before sending the first packet it contains, causing a...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an error handling path in the mctpinit function in the mctp driver that fails to free up routing resources,...
Vulnerability of the mctp_i3c_header_create() function (drivers/net/mctp/mctp-i3c.c) in the Linux kernel, allowing a hacker to cause a service failure
The vulnerability of the mctpi3cheadercreate function drivers/net/mctp/mctp-i3c.c in the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-18470
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the net: mctp module, where the bind lookup runs under RCU Read-Copy Update. To prevent a socket from being...