CVE-2025-68170

CVE-2025-68170: Linux kernel drm/radeon driver vulnerability due to improper deallocation of a rdev object. Root cause: after switching to devm_drm_dev_alloc(), rdev is managed by devres and must not be freed with kfree(). The patch prevents kfree() on the devres-managed rdev, avoiding a double-f...

CVE-2025-68170 drm/radeon: Do not kfree() devres managed rdev

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree devres managed rdev Since the allocation of the drivers main structure was changed to devmdrmdevalloc rdev is managed by devres and we shouldn't be calling kfree on it. This fixes things exploding if the...

PT-2025-51594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the DRM/radeon driver related to the incorrect handling of device resource management. Specifically, calls to drm put dev persist in the probe...

PT-2025-51583

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the DRM/Radeon driver where the rdev structure, managed by devres, was incorrectly being freed using kfree. This occurred because the allocation metho...

PT-2025-51728

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where an incorrect error return value during device probe can lead to system instability. Specifically, after DME Link Startup, a failure during drive...

SUSE CVE-2022-50663

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix possible memory leak in stmmacdvrprobe The bitmapfree should be called to free priv-afxdpzcqps when createsinglethreadworkqueue fails, otherwise there will be a memory leak, so we add the err path errorwqinit to...

SUSE CVE-2023-53842

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove The MBHC resources must be released on component probe failure and removal so can not be tied to the lifetime of the component device. This is specifically needed ...

CVE-2023-53842

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove The MBHC resources must be released on component probe failure and removal so can not be tied to the lifetime of the component device. This is specifically needed ...

CVE-2022-50663

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix possible memory leak in stmmacdvrprobe The bitmapfree should be called to free priv-afxdpzcqps when createsinglethreadworkqueue fails, otherwise there will be a memory leak, so we add the err path errorwqinit to...

CVE-2023-53842

CVE-2023-53842 (Linux kernel) : ASoC: codecs: wcd-mbhc-v2 fix resource leaks on component remove. The MBHC resources must be released on component probe failure and removal to avoid lingering handles tied to the component lifetime. Impact described includes probe deferral failures when reprobing ...

CVE-2023-53842 ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove The MBHC resources must be released on component probe failure and removal so can not be tied to the lifetime of the component device. This is specifically needed ...

CVE-2023-53842 ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove The MBHC resources must be released on component probe failure and removal so can not be tied to the lifetime of the component device. This is specifically needed ...

PT-2025-49733

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the MBHC Multi-channel High-definition Codec component removal process within the ASoC ALSA system on chip codecs of the Linux kernel. Specifically, MBHC...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

Siemens SCALANCE and RUGGEDCOM Devices Double Free (CVE-2024-46673)

scsi: aacraid: Fix double-free on probe failure. aacprobeone calls hardware-specific init functions through the aacdriverident::init pointer, all of which eventually call down to aacinitadapter. If aacinitadapter fails after allocating memory for aacdev::queues, it frees the memory but does not...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

kernel: wifi: rtlwifi: remove unused check_buddy_priv

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused checkbuddypriv Commit 2461c7d60f9f "rtlwifi: Update header file" introduced a global list of private data structures. Later on, commit 26634c4b1868 "rtlwifi Modify existing bits to match vendor versio...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988809 advisory. In the Linux kernel, the following vulnerability has been resolved: memory: renesas-rpc-if: fix platform-device leak in error path Make sure to free the flash platfo...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988677)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988677 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Fix resource leak in case of probe failure The driver doesn't clean up all the...