USN-7605-2: Linux kernel (Low Latency) vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...

The vulnerability of the arguments hdr_len/txbuf_len of the qcom-pmic component in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the hdrlen/txbuflen arguments of the qcom-pmic component in Linux operating systems is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the Linux kernel component drivers/phy/qualcomm/phy-qcom-qmp-usb-legacy.c allows a attacker to cause a service failure.

The vulnerability of the drivers/phy/qualcomm/phy-qcom-qmp-usb-legacy.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the driver/phy/qualcomm/phy-qcom-qmp-usb.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/phy/qualcomm/phy-qcom-qmp-usb.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2025-38093

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: x1e80100: Add GPU cooling Unlike the CPU, the GPU does not throttle its speed automatically when it reaches high temperatures. With certain high GPU loads it is possible to reach the critical hardware shutdown...

UBUNTU-CVE-2025-38093

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: x1e80100: Add GPU cooling Unlike the CPU, the GPU does not throttle its speed automatically when it reaches high temperatures. With certain high GPU loads it is possible to reach the critical hardware shutdown...

The vulnerabilities of microprogramming software for AMD, Qualcomm, and Imagination allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software for AMD, Qualcomm, and Imagination relates to incorrect input of configuration data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Vulnerability of the venus_probe() function in the drivers/media/platform/qcom/venus/core.c module – A driver for supporting multimedia devices in the Linux operating system, which allows an attacker to gain access to protected information.

Vulnerability of the venusprobe function in the drivers/media/platform/qcom/venus/core.c module – The Linux kernel’s multimedia device support driver has vulnerabilities related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information...

The vulnerability of the qcom_ebi2_probe() function in the drivers/bus/qcom-ebi2.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the qcomebi2probe function in the drivers/bus/qcom-ebi2.c module of the Linux kernel is related to improper memory release before deleting the last pointer memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Vulnerability of the emacremove() function in the drivers/net/ethernet/qualcomm/emac/emac.c module – A driver for supporting Ethernet adapter devices in Qualcomm-based Linux operating systems, which allows a hacker to cause a service failure.

Vulnerability of the emacremove function in the drivers/net/ethernet/qualcomm/emac/emac.c module – The Linux kernel’s Ethernet adapter support driver has a vulnerability related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a syste...

The vulnerability of the qtrr_endpoint_post() function in the net/qrtr/qrtr.c module allows a hacker to trigger a service failure in the Qualcomm IPC kernel of the Linux operating system.

The vulnerability of the qtrrendpointpost function in the net/qrtr/qrtr.c module is related to buffer out-of-bounds reading. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2022-50194

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: aoss: Fix refcount leak in qmpcoolingdevicesregister Every iteration of foreachavailablechildofnode decrements the reference count of the previous node. When breaking early from a foreachavailablechildofnode loop, we...

DEBIAN-CVE-2022-50195

In the Linux kernel, the following vulnerability has been resolved: ARM: dts: qcom: replace gcc PXO with pxoboard fixed clock Replace gcc PXO phandle to pxoboard fixed clock declared in the dts. gcc driver doesn't provide PXOSRC as it's a fixed-clock. This cause a kernel panic if any driver...

DEBIAN-CVE-2022-50029

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: dont disable gccsleepclksrc Once the usb sleep clocks are disabled, clock framework is trying to disable the sleep clock source also. However, it seems that it cannot be disabled and trying to do so produces:...

CVE-2022-50011

In the Linux kernel, the following vulnerability has been resolved: venus: pmhelpers: Fix warning in OPP during probe Fix the following WARN triggered during Venus driver probe on 5.19.0-rc8-next-20220728: WARNING: CPU: 7 PID: 339 at drivers/opp/core.c:2471 devpmoppsetconfig+0x49c/0x610 Modules...

UBUNTU-CVE-2022-50196

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: ocmem: Fix refcount leak in ofgetocmem ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak. ofnodeput will...

UBUNTU-CVE-2022-50029

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: dont disable gccsleepclksrc Once the usb sleep clocks are disabled, clock framework is trying to disable the sleep clock source also. However, it seems that it cannot be disabled and trying to do so produces:...

UBUNTU-CVE-2022-50112

In the Linux kernel, the following vulnerability has been resolved: rpmsg: qcomsmd: Fix refcount leak in qcomsmdparseedge ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when done...

CVE-2022-50196

In the Linux kernel, the vulnerability CVE-2022-50196 affects the soc: qcom: ocmem path. It stems from a refcount leak in of_parse_phandle() where the returned node pointer’s refcount isn’t released; a missing of_node_put() caused the leak. The fix adds a proper of_node_put() on the node when it ...

CVE-2022-50196

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: ocmem: Fix refcount leak in ofgetocmem ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak. ofnodeput will...