CVE-2022-50444 clk: tegra20: Fix refcount leak in tegra20_clock_init

In the Linux kernel, the following vulnerability has been resolved: clk: tegra20: Fix refcount leak in tegra20clockinit offindmatchingnode returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

CVE-2022-50444

The CVE-2022-50444 issue is a Linux kernel refcount leak in the Tegra20 clock init path. Root cause: of_find_matching_node() returns a node pointer with a refcount incremented; missing of_node_put() on termination leads to leaks. A fix in clk: tegra20: Fix refcount leak in tegra20_clock_init adds...

CVE-2022-50429 memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()

In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in oflpddr3getddrtimings We should add the ofnodeput when breaking out of foreachchildofnode as it will automatically increase and decrease the refcount...

CVE-2022-50429

CVE-2022-50429 affects the Linux kernel memory/OF subtree. The issue is a refcount leak in of_lpddr3_get_ddr_timings() caused by not balancing refcounts when breaking out of for_each_child_of_node(). The fix adds of_node_put() at the exit path to balance refcounts. Connected advisories (SUSE OSVs...

CVE-2022-50429 memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()

In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in oflpddr3getddrtimings We should add the ofnodeput when breaking out of foreachchildofnode as it will automatically increase and decrease the refcount...

PT-2025-40143

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the tegra210 clock init function within the Linux kernel. The of find matching node function increments the reference count of the returned node pointer,...

PT-2025-40129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the tegra20 clock init function within the Linux kernel. The of find matching node function increments the reference count of the returned node pointer,...

PT-2025-40142

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3+ 54 Description The Linux kernel contains a flaw in the del mtd device function related to reference counting. Specifically, the function calls of node put on a potentially cleared device node pointer,...

PT-2025-40114

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue was identified and resolved in the Linux kernel related to reference counting within the of lpddr3 get ddr timings function. The issue occurs when iterating through...

Linux Distros Unpatched Vulnerability : CVE-2025-39871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: idxd: Remove improper idxdfree The call to idxdfree introduces a duplicate putdevice leading to a reference count underflow: refcountt: underflow;...

SUSE CVE-2025-39871

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxdfree The call to idxdfree introduces a duplicate putdevice leading to a reference count underflow: refcountt: underflow; use-after-free. WARNING: CPU: 15 PID: 4428 at lib/refcount.c:28...

UBUNTU-CVE-2025-39871

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxdfree The call to idxdfree introduces a duplicate putdevice leading to a reference count underflow: refcountt: underflow; use-after-free. WARNING: CPU: 15 PID: 4428 at lib/refcount.c:28...

CVE-2025-39882 drm/mediatek: fix potential OF node use-after-free

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: fix potential OF node use-after-free The foreachchildofnode helper drops the reference it takes to each node as it iterates over children and an explicit ofnodeput is only needed when exiting the loop early. Drop th...

CVE-2025-39871 dmaengine: idxd: Remove improper idxd_free

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxdfree The call to idxdfree introduces a duplicate putdevice leading to a reference count underflow: refcountt: underflow; use-after-free. WARNING: CPU: 15 PID: 4428 at lib/refcount.c:28...

CVE-2025-39871 dmaengine: idxd: Remove improper idxd_free

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Remove improper idxdfree The call to idxdfree introduces a duplicate putdevice leading to a reference count underflow: refcountt: underflow; use-after-free. WARNING: CPU: 15 PID: 4428 at lib/refcount.c:28...

CVE-2025-39871

CVE-2025-39871 relates to the Linux kernel dmaengine idxd driver. The fix removes an improper idxd_free() call that could trigger a duplicate put_device() leading to refcount underflow and a use-after-free during module unload. The issue arises in idxd_remove() and during module exit when CONFIG_...

Linux Distros Unpatched Vulnerability : CVE-2022-50392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: mediatek: mt8183: fix refcount leak in mt8183mt6358ts3a227max98357devprobe The node returned by ofparsephandle with refcount incremented, ofnodeput needs ...

Linux Distros Unpatched Vulnerability : CVE-2023-53445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix a refcount bug in qrtrrecvmsg Syzbot reported a bug as following: refcountt:...

SUSE CVE-2022-50274

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: adopts refcnt to avoid UAF dvbunregisterdevice is known that prone to use-after-free. That is, the cleanup from dvbunregisterdevice releases the dvbdevice even if there are pointers stored in file-privatedata still...

SUSE CVE-2022-50392

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8183: fix refcount leak in mt8183mt6358ts3a227max98357devprobe The node returned by ofparsephandle with refcount incremented, ofnodeput needs be called when finish using it. So add it in the error path in...