18172 matches found
CVE-2022-49471
In the Linux kernel, the following vulnerability has been resolved: rtw89: cfo: check macid to avoid out-of-bounds Somehow, hardware reports incorrect macid and pollute memory. Check index before we access the array. UBSAN: array-index-out-of-bounds in rtw89/phy.c:2517:23 index 188 is out of rang...
CVE-2022-49404 RDMA/hfi1: Fix potential integer multiplication overflow errors
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix potential integer multiplication overflow errors When multiplying of different types, an overflow is possible even when storing the result in a larger type. This is because the conversion is done after the...
CVE-2022-49393 misc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_impl
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix list iterator in fastrpcreqmemunmapimpl This is another instance of incorrect use of list iterator and checking it for NULL. The list iterator value 'map' will always be set and non-NULL by listforeachentry, so...
CVE-2022-49393
CVE-2022-49393 affects the Linux kernel code path misc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_impl. The root cause is an incorrect use of the list iterator and a NULL check on the iterator value, where list_for_each_entry() guarantees a non-NULL map, causing the loop exit condition ...
CVE-2022-49270 dm: fix use-after-free in dm_cleanup_zoned_dev()
In the Linux kernel, the following vulnerability has been resolved: dm: fix use-after-free in dmcleanupzoneddev dmcleanupzoneddev uses queue, so it must be called before blkcleanupdisk starts its killing: blkcleanupdisk-blkcleanupqueue-kobjectput-blkreleasequeue-...
CVE-2022-49270 dm: fix use-after-free in dm_cleanup_zoned_dev()
In the Linux kernel, the following vulnerability has been resolved: dm: fix use-after-free in dmcleanupzoneddev dmcleanupzoneddev uses queue, so it must be called before blkcleanupdisk starts its killing: blkcleanupdisk-blkcleanupqueue-kobjectput-blkreleasequeue-...
CVE-2022-49270
The Linux kernel contains a use-after-free vulnerability in the dm (Device Mapper) component, specifically within the dm_cleanup_zoned_dev() function. The root cause is a race condition where dm_cleanup_zoned_dev() must be executed before blk_cleanup_disk() begins its execution; otherwise, an RCU...
CVE-2022-49261
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: add missing boundary check in vmaccess A missing bounds check in vmaccess can lead to an out-of-bounds read or write in the adjacent memory area, since the len attribute is not validated before the memcpy later in t...
CVE-2022-49235
In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix uninit value bugs Syzbot reported 2 KMSAN bugs in ath9k. All of them are caused by missing field initialization. In htcconnectservice svcmetalen and pad are not initialized. Based on code it looks like in current sk...
CVE-2022-49212 mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: atmel: fix refcount issue in atmelnandcontrollerinit The reference counting issue happens in several error handling paths on a refcounted object "nc-dmac". In these paths, the function simply returns the error code,...
CVE-2022-49174
CVE-2022-49174 affects the Linux kernel ext4 filesystem, specifically the ext4_mb_mark_bb() logic when flex_bg (default enabled) and fast_commit are used. The issue occurs when an inode’s extents span block groups and ext4_mb_mark_bb() reads the starting block group’s bitmap only once; it does no...
CVE-2022-49174
In the Linux kernel, the following vulnerability has been resolved: ext4: fix ext4mbmarkbb with flexbg with fastcommit In case of flexbg feature which is by default enabled, extents for any given inode might span across blocks from two different block group. ext4mbmarkbb only reads the bufferhead...
CVE-2021-47636
In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix read out-of-bounds in ubifswbufwritenolock Function ubifswbufwritenolock may access buf out of bounds in following process: ubifswbufwritenolock: alignedlen = ALIGNlen, 8; // Assume len = 4089, alignedlen = 4096 if...
PT-2025-8386 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified, specifically in the dpaa2-eth component. The issue arises when the TSO header is DMA unmapped before retrieving the virtual...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the dmamask and dmaparms of the device object in the vmbusdeviceregister function not being properly...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a divide-by-zero error in the RDMA DIM...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from efxef10tryupdatenicstatsvf not enabling BH when freeing DMA buffers, which could cause the kernel to crash...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unchecked DMA pointer that could lead to a null pointer dereference...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a possible overflow in RDMA/hfi1 during integer multiplication...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from prog-jitedlen not being cleared with prog-jited, which could lead to illegal memory accesses...