CVE-2022-49000

CVE-2022-49000 – Linux kernel (iommu/vt-d) refcount leak fix . The issue stems from for_each_pci_dev() implemented via pci_get_device(); the returned pci_dev’s reference count is incremented, but input dev is not always decremented, leading to a potential refcount leak. The patch adds a pci_dev_p...

CVE-2022-48965 gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()

In the Linux kernel, the following vulnerability has been resolved: gpio/rockchip: fix refcount leak in rockchipgpiolibregister The node returned by ofgetparent with refcount incremented, ofnodeput needs be called when finish using it. So add it in the end of ofpinctrlget...

CVE-2022-48965 gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()

In the Linux kernel, the following vulnerability has been resolved: gpio/rockchip: fix refcount leak in rockchipgpiolibregister The node returned by ofgetparent with refcount incremented, ofnodeput needs be called when finish using it. So add it in the end of ofpinctrlget...

CVE-2022-48965 gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()

In the Linux kernel, the following vulnerability has been resolved: gpio/rockchip: fix refcount leak in rockchipgpiolibregister The node returned by ofgetparent with refcount incremented, ofnodeput needs be called when finish using it. So add it in the end of ofpinctrlget...

CVE-2022-48965

CVE-2022-48965 concerns a refcount leak in rockchip_gpiolib_register() within linux-5.x kernels. The root cause is a missing of_node_put() for the parent node after obtaining it with of_get_parent(). The fix adds of_node_put() at the end of of_pinctrl_get() to balance the refcount. Multiple advis...

CVE-2022-48961 net: mdio: fix unbalanced fwnode reference count in mdio_device_release()

In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix unbalanced fwnode reference count in mdiodevicerelease There is warning report about ofnode refcount leak while probing mdio device: OF: ERROR: memory leak, expected refcount 1 instead of 2, ofnodeget/ofnodeput...

CVE-2022-48961 net: mdio: fix unbalanced fwnode reference count in mdio_device_release()

In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix unbalanced fwnode reference count in mdiodevicerelease There is warning report about ofnode refcount leak while probing mdio device: OF: ERROR: memory leak, expected refcount 1 instead of 2, ofnodeget/ofnodeput...

CVE-2024-50043

CVE-2024-50043 affects the Linux kernel nfsd component (nfsd4_free_stateid). The issue arises when multiple FREE_STATEIDs are sent for the same delegation stateid; releasing under a dropped client lock allows a subsequent FREE_STATE to reuse the stateid, leading to use-after-free or counter under...

CVE-2024-50043 nfsd: fix possible badness in FREE_STATEID

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible badness in FREESTATEID When multiple FREESTATEIDs are sent for the same delegation stateid, it can lead to a possible either use-after-free or counter refcount underflow errors. In nfsd4freestateid under the...

CVE-2024-50043 nfsd: fix possible badness in FREE_STATEID

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible badness in FREESTATEID When multiple FREESTATEIDs are sent for the same delegation stateid, it can lead to a possible either use-after-free or counter refcount underflow errors. In nfsd4freestateid under the...

CVE-2024-50021 ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icedpllinitrclkpins This patch addresses a reference count handling issue in the icedpllinitrclkpins function. The function calls icedpllgetpins, which increments the reference count of t...

CVE-2024-50021 ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icedpllinitrclkpins This patch addresses a reference count handling issue in the icedpllinitrclkpins function. The function calls icedpllgetpins, which increments the reference count of t...

CVE-2024-50021

Technical details for CVE-2024-50021 are not publicly disclosed in the provided Connected documents. Monitor for updates from vendor/security advisories.

CVE-2024-50020 ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icesriovsetmsixveccount This patch addresses an issue with improper reference count handling in the icesriovsetmsixveccount function. First, the function calls icegetvfbyid, which...

CVE-2024-50020 ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icesriovsetmsixveccount This patch addresses an issue with improper reference count handling in the icesriovsetmsixveccount function. First, the function calls icegetvfbyid, which...

CVE-2024-50020

CVE-2024-50020 (Linux kernel) affects the ice driver’s refcount handling in ice_sriov_set_msix_vec_count(). The issue: vf pointer reference counts were leaked if ice_get_vf_by_id() succeeds but ice_get_vf_vsi() fails, or if vf->first_vector_idx

AZL-51372 CVE-2024-49982 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e92662 "aoe: fix the potential use-after-free problem in aoecmdcfgpkts" makes tx calling devput instead of doing in aoecmdcfgpkts. It...

AZL-52947 CVE-2024-49940 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: l2tp: prevent possible tunnel refcount underflow When a session is created, it sets a backpointer to its tunnel. When the session refcount drops to 0, l2tpsessionfree drops the tunnel refcount if session-tunnel is non-NULL...

UBUNTU-CVE-2024-49988

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...

CVE-2024-49964 mm/hugetlb: fix memfd_pin_folios free_huge_pages leak

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix memfdpinfolios freehugepages leak memfdpinfolios followed by unpinfolios fails to restore freehugepages if the pages were not already faulted in, because the folio refcount for pages created by memfdallocfolio nev...