CVE-2021-47425 i2c: acpi: fix resource leak in reconfiguration device addition

In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpii2cfindadapterbyhandle calls busfinddevice which takes a reference on the adapter which is never released which will result in a reference count leak and render...

SUSE CVE-2024-35793

In the Linux kernel, the following vulnerability has been resolved: debugfs: fix wait/cancellation handling during remove Ben Greear further reports deadlocks during concurrent debugfs remove while files are being accessed, even though the code in question now uses debugfs cancellations. Turns ou...

SUSE CVE-2024-35969

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6getifaddr and ipv6deladdr Although ipv6getifaddr walks inet6addrlst under the RCU lock, it still means hlistforeachentryrcu can return an item that got removed from the list. The memory itself...

SUSE CVE-2024-36009

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix netdev refcount issue The devtracker is added to ax25cb in ax25bind. When the ax25 device is detaching, the devtracker of ax25cb should be deallocated in ax25killbydevice instead of the devtracker of ax25dev. The log...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a reference count leak...

CVE-2023-52848: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop metainode's page cache in f2fsputsuper syzbot reports a kernel bug as below: F2FS-fs loop1: detect filesystem reference count leak during umount, type: 10, count: 1 kernel BUG at fs/f2fs/super.c:1639! CPU: 0 PID...

CVE-2021-47425: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: i2c: acpi: fix resource leak in reconfiguration device addition acpii2cfindadapterbyhandle calls busfinddevice which takes a reference on the adapter which is never released which will result in a reference count leak and render...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a reference count leak...

DEBIAN-CVE-2024-35969

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6getifaddr and ipv6deladdr Although ipv6getifaddr walks inet6addrlst under the RCU lock, it still means hlistforeachentryrcu can return an item that got removed from the list. The memory itself...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which is caused by a reference count underflow in the btrfs module...

UBUNTU-CVE-2024-27403

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flowoffloadadd fails, error path...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which is caused by a reference count underflow in the netfilter module...

PT-2024-28068

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak issue exists in the ax25 dev device down function, which can cause a memory leak when the ax25 device is shutting down. The issue arises because the ax25 dev devic...

PT-2024-28416

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description A reference count leakage issue was found in the Linux kernel's ext4 file system, specifically in the ext4 xattr block cache find function. When ext4 sb bread returns -ENOMEM, the e refcnt of t...

CVE-2022-48700

In the Linux kernel, the following vulnerability has been resolved: vfio/type1: Unpin zero pages There's currently a reference count leak on the zero page. We increment the reference via pinuserpagesremote, but the page is later handled as an invalid/reserved page, therefore it's not accounted...

CVE-2022-48700

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

AZL-42265 CVE-2022-48670 affecting package kernel for versions less than 5.15.158.2-1

In the Linux kernel, the following vulnerability has been resolved: peci: cpu: Fix use-after-free in adevrelease When auxiliarydeviceadd returns an error, auxiliarydeviceuninit is called, which causes refcount for device to be decremented and .release callback will be triggered. Because adevrelea...

CVE-2022-48700

...

CVE-2022-48700

...

CVE-2022-48700

CVE-2022-48700 affects the Linux kernel VFIO (type1) path, specifically an issue titled “Unpin zero pages.” The connected Nessus entry explicitly references “vfio/type1: Unpin zero pages (CVE-2022-48700),” indicating the vulnerability resides in the VFIO code path and is tied to unpinning of zero...