CVE-2022-50276 power: supply: fix null pointer dereferencing in power_supply_get_battery_info

In the Linux kernel, the following vulnerability has been resolved: power: supply: fix null pointer dereferencing in powersupplygetbatteryinfo when kmalloc fail to allocate memory in kasprintf, propname will be NULL, strcmp called by ofgetproperty will cause null pointer dereference. So return...

CVE-2022-50275 drm/radeon: Add the missed acpi_put_table() to fix memory leak

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpiputtable to fix memory leak When the radeon driver reads the bios information from ACPI table in radeonacpivfctbios, it misses to call acpiputtable to release the ACPI memory after the init, so add...

CVE-2022-50267 mmc: rtsx_pci: fix return value check of mmc_add_host()

In the Linux kernel, the following vulnerability has been resolved: mmc: rtsxpci: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not added...

CVE-2022-50267 mmc: rtsx_pci: fix return value check of mmc_add_host()

In the Linux kernel, the following vulnerability has been resolved: mmc: rtsxpci: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not added...

CVE-2022-50267

CVE-2022-50267 pertains to the Linux kernel’s MMC/SD subsystem, specifically the mmc_add_host() path in the mmc: rtsx_pci driver. Root cause: return value of mmc_add_host() was not checked; on error, memory allocated by mmc_alloc_host() could be leaked, risking a kernel crash when removing an una...

CVE-2023-53177

In the Linux kernel, the following vulnerability has been resolved: media: hi846: fix usage of pmruntimegetifinuse pmruntimegetifinuse does not only return nonzero values when the device is in use, it can return a negative errno too. And especially during resuming from system suspend, when runtim...

CVE-2023-53166

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix externalpowerchanged race bq25890chargerexternalpowerchanged dereferences bq-charger, which gets sets in bq25890powersupplyinit like this: bq-charger = devmpowersupplyregisterbq-dev, &bq-desc, &psycfg;...

DEBIAN-CVE-2023-53166

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix externalpowerchanged race bq25890chargerexternalpowerchanged dereferences bq-charger, which gets sets in bq25890powersupplyinit like this: bq-charger = devmpowersupplyregisterbq-dev, &bq-desc, &psycfg;...

UBUNTU-CVE-2023-53166

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix externalpowerchanged race bq25890chargerexternalpowerchanged dereferences bq-charger, which gets sets in bq25890powersupplyinit like this: bq-charger = devmpowersupplyregisterbq-dev, &bq-desc, &psycfg;...

CVE-2023-53177

CVE-2023-53177 affects the Linux kernel, specifically the media: hi846 driver, where pm_runtime_get_if_in_use() can return -EAGAIN during system resume, risking a refcount underflow after a subsequent pm_runtime_put(). The issue is mitigated by the patch that fixes system-resume handling for -EAG...

CVE-2023-53176

CVE-2023-53176 concerns the Linux kernel serial driver stack. When unbinding a port-specific 8250 driver, control passes to the generic serial8250 driver while port->pm may still reference the now-destroyed driver, causing an oops roughly 10 seconds later. The connected documents confirm the r...

CVE-2023-53166 power: supply: bq25890: Fix external_power_changed race

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix externalpowerchanged race bq25890chargerexternalpowerchanged dereferences bq-charger, which gets sets in bq25890powersupplyinit like this: bq-charger = devmpowersupplyregisterbq-dev, &bq-desc, &psycfg;...

CVE-2023-53166 power: supply: bq25890: Fix external_power_changed race

In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix externalpowerchanged race bq25890chargerexternalpowerchanged dereferences bq-charger, which gets sets in bq25890powersupplyinit like this: bq-charger = devmpowersupplyregisterbq-dev, &bq-desc, &psycfg;...

CVE-2023-53166

CVE-2023-53166 is a Linux kernel race in the bq25890 charger driver. The external_power_changed callback dereferenced bq->charger before it was guaranteed to be set during power_supply_init, creating a potential NULL pointer dereference in early boot when the extcon power is detected. The vuln...

PT-2025-37530

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The bq25890 charger external power changed function in the Linux kernel could experience a NULL pointer dereference. This occurs because the function may be called before the bq-charge...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle power state changes in the bq25890chargerexternalpowerchanged function, which...

CVE-2025-36035

IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by issuing a specially crafted IBM i hypervisor call that would disclose memory contents or consume excessive memory...

CVE-2025-36035 IBM PowerVM Hypervisor denial of service

IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by issuing a specially crafted IBM i hypervisor call that would disclose memory contents or consume excessive memory...

Linux Distros Unpatched Vulnerability : CVE-2025-39774

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: rzg2ladc: Set driver data before enabling runtime PM When stress-testing the system by repeatedly unbinding and binding the ADC device in a loop, and...

Security Bulletin: This Power System update is being released to address CVE-2025-36035

Summary The PowerVM hypervisor is vulnerable to a carefully crafted IBMi hypervisor call that can crash system or make a limited amount of system memory available Vulnerability Details CVEID:CVE-2025-36035 DESCRIPTION: The PowerVM hypervisor could allow a local privileged user to cause a denial o...