PT-2025-41052

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the solo sysfs init function within the solo6x10 driver. If device register returns an error during initialization, memory allocated by dev set name is not freed...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986380 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix error handling of scsihostalloc After device is initialized via deviceinitialize,...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-381767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-381767 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rioaddnet fails rioaddnet calls deviceregister and fails when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987029 advisory. In the Linux kernel, the following vulnerability has been resolved: phylib: fix potential use-after-free Commit bafbdd527d56 phylib: Add device reset GPIO support...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987391 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: Fix refcount leak in imxsgtl5000probe offindi2cdevicebynode takes a reference, In erro...

SUSE CVE-2025-39951

In the Linux kernel, the following vulnerability has been resolved: um: virtiouml: Fix use-after-free after putdevice in probe When registervirtiodevice fails in virtioumlprobe, the code sets vudev-registered = 1 even though the device was not successfully registered. This can lead to...

um: virtio_uml: Fix use-after-free after put_device in probe

...

CVE-2022-50481

In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter If deviceregister fails in cxlregisterafu|adapter, the device is not added, deviceunregister can not be called in the error path, otherwise it will cause a null-ptr-dere...

CVE-2022-50474

In the Linux kernel, the following vulnerability has been resolved: macintosh: fix possible memory leak in macioaddonedevice Afer commit 1fa5ae857bb1 "driver core: get rid of struct device's busid string array", the name of device is allocated dynamically. It needs to be freed when ofdeviceregist...

UBUNTU-CVE-2022-50481

In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxlguestinitafu|adapter If deviceregister fails in cxlregisterafu|adapter, the device is not added, deviceunregister can not be called in the error path, otherwise it will cause a null-ptr-dere...

CVE-2022-50481

CVE-2022-50481 pertains to the Linux kernel; the issue is a potential null pointer dereference in cxl_guest_init_afu|adapter() when device_register() fails in cxl_register_afu|adapter(). The error path could dereference a removed-but-not-added device unless the reference is properly released. The...

CVE-2025-39951 um: virtio_uml: Fix use-after-free after put_device in probe

In the Linux kernel, the following vulnerability has been resolved: um: virtiouml: Fix use-after-free after putdevice in probe When registervirtiodevice fails in virtioumlprobe, the code sets vudev-registered = 1 even though the device was not successfully registered. This can lead to...

PT-2025-40661

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the macio add one device function within the Linux kernel’s macintosh component. Following a commit 1fa5ae857bb1 that altered device name allocation, a...

EUVD-2022-55385

Malicious code in bioql PyPI...

EUVD-2022-55524

Malicious code in bioql PyPI...

EUVD-2025-27866

Malicious code in bioql PyPI...

EUVD-2025-31957

Malicious code in bioql PyPI...

SUSE CVE-2022-50427

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix possible memory leak in sndac97devregister If deviceregister fails in sndac97devregister, it should call putdevice to give up reference, or the name allocated in devsetname is leaked...

SUSE CVE-2022-50462

In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-mt: fix possible memory leak while module exiting Afer commit 1fa5ae857bb1 "driver core: get rid of struct device's busid string array", the name of device is allocated dynamically, it need be freed when module exiting,...

UBUNTU-CVE-2022-50464

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: Fix PCI device refcount leak in mt7915pciinithif2 As comment of pcigetdevice says, it returns a pcidevice with its refcount increased. We need to call pcidevput to decrease the refcount. Save the return value of...