CVE-2022-50645

The CVE-2022-50645 issue involves a refcount leak in the Linux kernel’s EDAC/i10nm path. Specifically, pci_get_dev_wrapper() could mishandle a PCI device by not accounting for the fact that pci_get_domain_bus_and_slot() returns a device with an incremented refcount, leading to a potential leak if...

CVE-2022-50636

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcideviceispresent for VFs by checking PF pcideviceispresent previously didn't work for VFs because it reads the Vendor and Device ID, which are 0xffff for VFs, which looks like they aren't present. Check the PF instead...

CVE-2022-50636

The CVE-2022-50636 entry concerns the Linux kernel PCI subsystem and VF handling. The vulnerability stemmed from pci_device_is_present() returning false for virtual functions (VFs) because it relied on Vendor/Device IDs (0xffff for VFs), causing virtio I/O issues during VF removal/unbinding or wh...

CVE-2022-50615

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in snruncoremmiomap pcigetdevice will increase the reference count for the returned pcidev, so snruncoregetmcdev will return a pcidev with its reference count increased. We need to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from snruncoremmiomap not properly freeing the pcidev reference count, which could lead to a memory leak...

CVE-2025-40115

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using iocinfo During mpt3sastransportportremove, messages were logged with devprintk against &mpt3sas;port-port-dev. At this point the SAS transport device may already be...

CVE-2025-40115 scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using iocinfo During mpt3sastransportportremove, messages were logged with devprintk against &mpt3sasport-port-dev. At this point the SAS transport device may already be...

CVE-2025-40115

In CVE-2025-40115, the Linux kernel scsi/mpt3sas driver fixes a crash during transport_port_remove() when logging messages with dev_printk() to a SAS port that may already be partially unregistered or freed. The fix switches logging to ioc_info() (PCI device) which remains valid until driver remo...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990745 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pcidevput pcigetdevice will increase t...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990304 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989752)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989752 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp fix pci device refcount leak in nv1aramnew As comment of pcigetdomainbusandslot...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989918)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989918 advisory. In the Linux kernel, the following vulnerability has been resolved: gpio: amd8111: Fix PCI device reference count leak foreachpcidev is implemented by pcigetdevice...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989087 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in dmardevscopeinit foreachpcidev is implemented by...

Astra Linux - Vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a NULL pointer access in the crashlog The use of intelpmtread for binary sysfs requires a pcidev. The current use of the endpoint value is only valid for telemetry endpoint usage. Without the ep, the...

CVE-2025-58149

CVE-2025-58149 affects the Xen hypervisor. The detach logic for PCI devices fails to remove access permissions to 64‑bit memory BARs when a device is unplugged, allowing PV guests to access memory of devices no longer assigned to them (HVM implications noted with required compromised device model...

EUVD-2022-55649

In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: fix module PLTs with mcount Li Huafei reports that mcount-based ftrace with module PLTs was broken by commit: a6253579977e4c6f "arm64: ftrace: consistently handle PLTs." When a module PLTs are used and a module is...

CVE-2022-50576

In the Linux kernel, the following vulnerability has been resolved: serial: pch: Fix PCI device refcount leak in pchrequestdma As comment of pcigetslot says, it returns a pcidevice with its refcount increased. The caller must decrement the reference count by calling pcidevput. Since 'dmadev' is...

Linux Distros Unpatched Vulnerability : CVE-2022-50520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/radeon: Fix PCI device refcount leak in radeonatrmgetbios As comment of pcigetclass says, it returns a pcidevice with its refcount increased and decreased t...

CVE-2025-39958

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was surprise removed When a PCI device is removed with surprise hotplug, there may still be attempts to attach the device to the default domain as part of tear down via...

SUSE CVE-2025-39958

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was surprise removed When a PCI device is removed with surprise hotplug, there may still be attempts to attach the device to the default domain as part of tear down via...