CVE-2022-50500 netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed

In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsimdrvprobe when nsimdevresourcesregister failed If some items in nsimdevresourcesregister fail, memory leak will occur. The following is the memory leak information. unreferenced object...

CVE-2022-50500 netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed

In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsimdrvprobe when nsimdevresourcesregister failed If some items in nsimdevresourcesregister fail, memory leak will occur. The following is the memory leak information. unreferenced object...

CVE-2022-50492 drm/msm: fix use-after-free on probe deferral

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix use-after-free on probe deferral The bridge counter was never reset when tearing down the DRM device so that stale pointers to deallocated structures would be accessed on the next tear down e.g. after a second late...

CVE-2022-50492 drm/msm: fix use-after-free on probe deferral

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix use-after-free on probe deferral The bridge counter was never reset when tearing down the DRM device so that stale pointers to deallocated structures would be accessed on the next tear down e.g. after a second late...

CVE-2022-50492

CVE-2022-50492 affects the Linux kernel DRM MSM driver. The issue is a use-after-free during probe deferral, where the bridge counter isn’t reset on DRM device teardown, causing stale pointers to deallocated structures to be accessed on the next tear down (e.g., after a late bind deferral). With ...

CVE-2023-53565

CVE-2023-53565 : Linux kernel vulnerability in brcmfmac wifi driver where probe() id argument can be NULL in two scenarios (brcmf_pcie_pm_leave_D3 reprobe path and manual driver binding via sysfs). This NULL IDs can cause a NULL pointer dereference on resume, potentially impacting Wi‑Fi functiona...

CVE-2023-53565 wifi: brcmfmac: Check for probe() id argument being NULL

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check for probe id argument being NULL The probe id argument may be NULL in 2 scenarios: 1. brcmfpciepmleaveD3 calling brcmfpcieprobe to reprobe the device. 2. If a user tries to manually bind the driver from sysf...

CVE-2023-53565 wifi: brcmfmac: Check for probe() id argument being NULL

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check for probe id argument being NULL The probe id argument may be NULL in 2 scenarios: 1. brcmfpciepmleaveD3 calling brcmfpcieprobe to reprobe the device. 2. If a user tries to manually bind the driver from sysf...

CVE-2023-53548 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb

In the Linux kernel, the following vulnerability has been resolved: net: usbnet: Fix WARNING in usbnetstartxmit/usbsubmiturb The syzbot fuzzer identified a problem in the usbnet driver: usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 754 at drivers/usb/core/urb.c:504...

CVE-2023-53533 Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe

In the Linux kernel, the following vulnerability has been resolved: Input: raspberrypi-ts - fix refcount leak in rpitsprobe rpifirmwareget take reference, we need to release it in error paths as well. Use devmrpifirmwareget helper to handling the resources. Also remove the existing rpifirmwareput...

CVE-2023-53533

CVE-2023-53533 is reported as resolved in the Linux kernel, addressing a refcount leak in the raspberrypi-ts driver during rpi_ts_probe. The root cause involves a reference taken by rpi_firmware_get() that is not released in error paths; the patch adds the use of devm_rpi_firmware_get() to manage...

CVE-2022-50480 memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()

In the Linux kernel, the following vulnerability has been resolved: memory: pl353-smc: Fix refcount leak bug in pl353smcprobe The break of foreachavailablechildofnode needs a corresponding ofnodeput when the reference 'child' is not used anymore. Here we do not need to call ofnodeput in fail path...

EUVD-2025-32381

In the Linux kernel, the following vulnerability has been resolved: um: virtiouml: Fix use-after-free after putdevice in probe When registervirtiodevice fails in virtioumlprobe, the code sets vudev-registered = 1 even though the device was not successfully registered. This can lead to...

CVE-2025-39951

In the Linux kernel, the following vulnerability has been resolved: um: virtiouml: Fix use-after-free after putdevice in probe When registervirtiodevice fails in virtioumlprobe, the code sets vudev-registered = 1 even though the device was not successfully registered. This can lead to...

UBUNTU-CVE-2025-39951

In the Linux kernel, the following vulnerability has been resolved: um: virtiouml: Fix use-after-free after putdevice in probe When registervirtiodevice fails in virtioumlprobe, the code sets vudev-registered = 1 even though the device was not successfully registered. This can lead to...

CVE-2025-39951 um: virtio_uml: Fix use-after-free after put_device in probe

In the Linux kernel, the following vulnerability has been resolved: um: virtiouml: Fix use-after-free after putdevice in probe When registervirtiodevice fails in virtioumlprobe, the code sets vudev-registered = 1 even though the device was not successfully registered. This can lead to...

CVE-2025-39951

CVE-2025-39951 is a Linux kernel use-after-free issue in virtio_uml during probe, fixed by virtio_uml_probe() logic (vu_dev->registered set only after successful registration). Connected advisories show Debian LTS updates addressing this CVE in linux packages (5.10.247-1 for Debian 11 and linu...

CVE-2025-39951 um: virtio_uml: Fix use-after-free after put_device in probe

In the Linux kernel, the following vulnerability has been resolved: um: virtiouml: Fix use-after-free after putdevice in probe When registervirtiodevice fails in virtioumlprobe, the code sets vudev-registered = 1 even though the device was not successfully registered. This can lead to...

PT-2025-40734

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified within the netdevsim module of the Linux kernel, specifically in the nsim drv probe function. This leak occurs when nsim dev resources register fails during...

PT-2025-40707

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the brcmfmac module where the probe function may receive a NULL id argument. This can occur during device reprobing after power management...