CVE-2022-50331

CVE-2022-50331 refers to a Linux kernel vulnerability in the wwan_hwsim subsystem. The description documents a memory leak in wwan_hwsim_dev_new() that can occur when probing a module if device_register() fails and the kobject refcount is not decremented to zero, leaking the name allocated in dev...

CVE-2023-53256 firmware: arm_ffa: Fix FFA device names for logical partitions

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix FFA device names for logical partitions Each physical partition can provide multiple services each with UUID. Each such service can be presented as logical partition with a unique combination of VM ID and...

CVE-2023-53256 firmware: arm_ffa: Fix FFA device names for logical partitions

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix FFA device names for logical partitions Each physical partition can provide multiple services each with UUID. Each such service can be presented as logical partition with a unique combination of VM ID and...

CVE-2022-50304

CVE-2022-50304 affects the Linux kernel mtd/core with a resource leak in init_mtd() that could impact systems registering MTD devices. The issue was fixed in the kernel code (references include commits such as 26c304a3f136009c5a2a04e2bf3ac6aa25aabcb4 and 1aadf01e5076b9ab6bf294b9622335c651314895)....

CVE-2022-50304 mtd: core: fix possible resource leak in init_mtd()

In the Linux kernel, the following vulnerability has been resolved: mtd: core: fix possible resource leak in initmtd I got the error report while inject fault in initmtd: sysfs: cannot create duplicate filename '/devices/virtual/bdi/mtd-0' Call Trace: dumpstacklvl+0x67/0x83 sysfswarndup+0x60/0x70...

CVE-2022-50298

CVE-2022-50298 refers to a Linux kernel issue in the slimbus: qcom-ngd driver where probe error handling failed to clean up resources, leading to a warning path and potential resource leakage. The fix adds proper cleanup in probe() to unwind resources acquired during probe, as documented in the i...

CVE-2023-53234 watchdog: Fix kmemleak in watchdog_cdev_register

In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix kmemleak in watchdogcdevregister kmemleak reports memory leaks in watchdogdevregister, as follows: unreferenced object 0xffff888116233000 size 2048: comm ""modprobe"", pid 28147, jiffies 4353426116 age 61.741s hex...

CVE-2022-50290

This CVE-2022-50290 entry is rejected/not used and does not represent an active vulnerability.

CVE-2022-50281 MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()

In the Linux kernel, the following vulnerability has been resolved: MIPS: SGI-IP27: Fix platform-device leak in bridgeplatformcreate In error case in bridgeplatformcreate after calling platformdeviceadd/platformdeviceadddata/ platformdeviceaddresources, release the failed 'pdev' or it will be lea...

CVE-2022-50246

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix of node refcount leak in tcpciregisterport I got the following report while doing devicemt6370-tcpc load test with CONFIGOFUNITTEST and CONFIGOFDYNAMIC enabled: OF: ERROR: memory leak, expected refcount 1...

CVE-2022-50246

CVE-2022-50246 involves a refcount leak in the Linux kernel’s usb: typec: tcpci subsystem. The vulnerability stems from tcpci_register_port()’s use of the fwnode-derived node in tcpci_parse_config(), where the node’s refcount is increased by device_get_named_child_node() but not balanced in all e...

CVE-2022-50246 usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix of node refcount leak in tcpciregisterport I got the following report while doing devicemt6370-tcpc load test with CONFIGOFUNITTEST and CONFIGOFDYNAMIC enabled: OF: ERROR: memory leak, expected refcount 1...

CVE-2022-50244 cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()

In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxlpciinitafu|adapter If deviceregister fails in cxlpciafu|adapter, the device is not added, deviceunregister can not be called in the error path, otherwise it will cause a null-ptr-deref becau...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an FFA device naming conflict that could lead to logical partition registration failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly releasing the kobject reference count when device registration fails, which could lead to a memory...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling a device registration failure situation, which could result in a null pointer...

PT-2025-37633

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak was resolved in the wwan hwsim module within the Linux kernel. Specifically, a fault injection during module probing could lead to a memory leak in the wwan hwsim dev new...

PT-2025-37697

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The Linux kernel contains a flaw in the arm ffa firmware where the device naming scheme for logical partitions fails to uniquely identify multiple services within a physical partition...

CVE-2025-8425

The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajaximportstrings function in all versions up to, and including, 1.1. This makes it possible for authenticated attackers, with...

Liferay Portal和Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...