2177 matches found
UBUNTU-CVE-2023-53244
In the Linux kernel, the following vulnerability has been resolved: media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish When the driver calls tw68riscbuffer to prepare the buffer, the function call dmaalloccoherent may fail, resulting in a empty buffer buf-cpu. Later when we free t...
UBUNTU-CVE-2023-53211
In the Linux kernel, the following vulnerability has been resolved: driver core: location: Free struct acpipldinfo pld before return false struct acpipldinfo pld should be freed before the return of allocation failure, to prevent memory leak, add the ACPIFREE to fix it...
CVE-2023-53244 media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish
In the Linux kernel, the following vulnerability has been resolved: media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish When the driver calls tw68riscbuffer to prepare the buffer, the function call dmaalloccoherent may fail, resulting in a empty buffer buf-cpu. Later when we free t...
CVE-2022-50294 wifi: libertas: fix memory leak in lbs_init_adapter()
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in lbsinitadapter When kfifoalloc failed in lbsinitadapter, cmd buffer is not released. Add free memory to processing error path...
CVE-2022-50293
CVE-2022-50293 affects the Linux kernel btrfs subsystem. When dropping file extent items for a range, ENOMEM could trigger a BUG_ON() path in btrfs_drop_extents(); the fix replaces those BUG_ON()s with proper transaction abort and error return handling. This means that instead of halting the tran...
CVE-2022-50293 btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON on ENOMEM when dropping extent items for a range If we get -ENOMEM while dropping file extent items in a given range, at btrfsdropextents, due to failure to allocate memory when attempting to increment the...
CVE-2022-50293 btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON on ENOMEM when dropping extent items for a range If we get -ENOMEM while dropping file extent items in a given range, at btrfsdropextents, due to failure to allocate memory when attempting to increment the...
CVE-2022-50293
In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON on ENOMEM when dropping extent items for a range If we get -ENOMEM while dropping file extent items in a given range, at btrfsdropextents, due to failure to allocate memory when attempting to increment the...
CVE-2023-53211 driver core: location: Free struct acpi_pld_info *pld before return false
In the Linux kernel, the following vulnerability has been resolved: driver core: location: Free struct acpipldinfo pld before return false struct acpipldinfo pld should be freed before the return of allocation failure, to prevent memory leak, add the ACPIFREE to fix it...
CVE-2023-53211 driver core: location: Free struct acpi_pld_info *pld before return false
In the Linux kernel, the following vulnerability has been resolved: driver core: location: Free struct acpipldinfo pld before return false struct acpipldinfo pld should be freed before the return of allocation failure, to prevent memory leak, add the ACPIFREE to fix it...
CVE-2023-53211
The CVE-2023-53211 issue affects the Linux kernel’s driver core, where a struct acpi_pld_info *pld was not freed before returning on allocation failure, risking a memory leak. The fix adds ACPI_FREE() calls to release the allocated memory before the function exits. Connected documents confirm thi...
DEBIAN-CVE-2022-50242
In the Linux kernel, the following vulnerability has been resolved: drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit If vp alloc failed in qlcnicsriovinit, all previously allocated vp needs to be freed...
CVE-2023-53181 dma-buf/dma-resv: Stop leaking on krealloc() failure
In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-resv: Stop leaking on krealloc failure Currently dmaresvgetfences will leak the previously allocated array if the fence iteration got restarted and the kreallocarray fails. Free the old array by hand, and make sure we...
CVE-2022-50252 igb: Do not free q_vector unless new one was allocated
In the Linux kernel, the following vulnerability has been resolved: igb: Do not free qvector unless new one was allocated Avoid potential use-after-free condition under memory pressure. If the kzalloc fails, qvector will be freed but left in the original adapter-qvectorvidx array position...
CVE-2022-50245
CVE-2022-50245 concerns a Linux kernel issue in the rapidio driver where a UAF can occur if kfifo_alloc() fails during mport_cdev_open(). The fix removes priv from the chdev->file_list before freeing it to prevent traversal from accessing a freed object (the smatch warning reference). Affected...
CVE-2022-50245 rapidio: fix possible UAF when kfifo_alloc() fails
In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible UAF when kfifoalloc fails If kfifoalloc fails in mportcdevopen, goto errfifo and just free priv. But priv is still in the chdev-filelist, then list traversal may cause UAF. This fixes the following smatch...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unhandled kasprintf memory allocation failure case that could result in a null pointer dereference...
PT-2025-37496
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak was identified in the qlcnic sriov init function within the qlcnic driver. If virtual port vp allocation fails during initialization, previously allocated virtual ports a...
PT-2025-37499
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free UAF issue within the rapidio component. Specifically, a failure in the kfifo alloc function during mport cdev open can lead to a UAF conditio...
PT-2025-37653
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak exists in the driver core due to the failure to free the acpi pld info structure before returning from an allocation failure. Specifically, the ACPI FREE function was not...