1912 matches found
kernel: Linux kernel KVM: Memory leak via coalesced MMIO unregistration failure
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. This vulnerability occurs when the unregistration of a coalesced Memory-Mapped I/O MMIO device fails, leading to a memory leak. A local attacker could exploit this flaw to consume system memory, potentially causing...
kernel: tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site
In the Linux kernel, the following vulnerability has been resolved: tpm: Add !tpmamdisrngdefective to the hwrngunregister call site The following crash was reported: 1950.279393 listdel corruption, ffff99560d485790-next is NULL 1950.279400 ------------ cut here ------------ 1950.279401 kernel BUG...
kernel: nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Fix use-after-free bugs caused by pn532cmdtimeout When the pn532 uart device is detaching, the pn532uartremove is called. But there are no functions in pn532uartremove that could delete the cmdtimeout timer, which wil...
kernel: wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init()
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: add missing unregisternetdev in wilcnetdevifcinit Fault injection test reports this issue: kernel BUG at net/core/dev.c:10731! invalid opcode: 0000 1 PREEMPT SMP KASAN PTI Call Trace: wilcnetdevifcinit+0x19f/0x220...
kernel: virtio_net: fix xdp_rxq_info bug after suspend/resume
In the Linux kernel, the following vulnerability has been resolved: virtionet: fix xdprxqinfo bug after suspend/resume The following sequence currently causes a driver bug warning when using virtionet: ip link set eth0 up echo mem /sys/power/state or e.g. rtcwake -s 10 -m mem ip link set eth0 dow...
kernel: wifi: mt76: do not run mt76_unregister_device() on unregistered hw
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: do not run mt76unregisterdevice on unregistered hw Trying to probe a mt7921e pci card without firmware results in a successful probe where ieee80211registerhw hasn't been called. When removing the driver,...
PT-2023-9716
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use after free in the rmi unregister function function. The put device call frees the fn variable, and the subsequent dereference of fn-num of irqs is a use aft...
PT-2023-9542
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential use-after-free UAF in the ca8210 probe function. If of clk add provider fails in ca8210 register ext clock, it calls clk unregister to release priv-cl...
PT-2023-8793 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.0-rc2+ Description: The issue is related to a null-ptr-deref bug in the mdev unregister parent function. When probing mdpy.ko, if kstrdup of create dir fails, it will return 0 and probe successfully. However...
subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the...
PT-2025-43098
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the nvdimm subsystem. Specifically, memory allocated for nd pmu-pmu.attr groups within the register nvdimm pmu function is not freed when the n...
PT-2025-49746
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc3+ 771 Description The Linux kernel contains an issue where the dsa tag 8021q unregister function is called under rtnl lock during driver removal when the tagging protocol is set to "ocelot-8021q". This c...
The vulnerability of the mctp_unregister() function in Linux operating systems allows a hacker to trigger a service failure.
The vulnerability of the mctpunregister function in Linux operating systems is related to the use of memory after it is freed during the processing of the mdev-addrs object. Exploiting this vulnerability can allow an attacker to cause a service failure...
DEBIAN-CVE-2023-3439
A flaw was found in the MCTP protocol in the Linux kernel. The function mctpunregister reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev-addrs object, potentially leading to a denial of servi...
PT-2025-40699
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to the handling of fprobes and rethooks during unregistration. Specifically, the rethook may not be released correctly after the ftrace ops is...
PT-2025-54050
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to memory management and resource handling within the imx93 clock driver. Specifically, the probe function does not properly release hardware...
CVE-2022-33227
Memory corruption in Linux android due to double free while calling unregister provider after register call...
Double free
Memory corruption in Linux android due to double free while calling unregister provider after register call...
CVE-2022-33227
CVE-2022-33227: Memory corruption in Linux-Android due to a double free when unregistering a provider after register. Affected component is Qualcomm GPS HLOS/Qualcomm chipsets under Android; root cause is a double free in the unregister path leading to memory corruption (impact: confidentiality, ...
