Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2023-52650)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-52650 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/tegra: dsi: Add missing chec...

CVE-2023-53385

In the Linux kernel, the following vulnerability has been resolved: media: mdp3: Fix resource leaks in offinddevicebynode Use putdevice to release the object get through offinddevicebynode, avoiding resource leaks...

UBUNTU-CVE-2022-49477

In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: Fix refcount leak in ariesaudioprobe ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when done. If extconfindedevbynode fails, it doesn't call ofnodeput Calling...

UBUNTU-CVE-2022-49216

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix reference leak in tegradsigangedprobe The reference taken by 'offinddevicebynode' must be released when not needed anymore. Add putdevice call to fix this...

PT-2025-8410

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the ASoC samsung module. The of parse phandle function returns a node pointer with an incremented refcount,...

PT-2025-8144

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak issue in the Linux kernel has been identified and resolved. The problem occurred because the reference taken by of find device by node was not released when it was no...

kernel: drm/tegra: dsi: Add missing check for of_find_device_by_node

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: dsi: Add missing check for offinddevicebynode The Linux kernel CVE team has assigned CVE-2023-52650 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050109-CVE-2023-52650-e2d1@gregkh/T...

DEBIAN-CVE-2024-50166

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix refcount handling of fman-related devices In macprobe there are multiple calls to offinddevicebynode, fmanbind and fmanportbind which takes references to ofdev-dev. Not all references taken by these calls are releas...

drm/tegra: dsi: Add missing check for of_find_device_by_node

...

PT-2012-5437

Name of the Vulnerable Software and Affected Versions The Monthly Archive by Node Type module version 6.x for Drupal Description The issue is related to improper permission checking by the module, allowing remote attackers to access restricted nodes. Recommendations For The Monthly Archive by Nod...

CVE-2012-4491: Undefined Security Weakness

The Monthly Archive by Node Type module 6.x for Drupal does not properly check permissions defined by nodeaccess modules, which allows remote attackers to access restricted nodes via unspecified vectors...

SA-CONTRIB-2010-026 - Monthly Archive by Node Type - Access Bypass

The Monthly Archive by Node Type module generates monthly archive pages and a block with links to the pages. You can specify the node types that will be included in the archive pages. In some summary listings, the Monthly Archive by Node Type module does not construct its SQL query to respect nod...

CVE-2010-0752: Undefined Security Weakness

The weekpostpage function in the Weekly Archive by Node Type module 6.x before 6.x-2.7 for Drupal does not properly implement node access restrictions when constructing SQL queries, which allows remote attackers to read restricted node listings via unspecified vectors...

SA-CONTRIB-2010-019 - Weekly Archive by Node Type - Access Bypass

The Weekly Archive by Node Type module generates weekly archive pages and a block with links to the pages. You can specify the node types that will be included in the archive pages. In weekly summaries listings, the Weekly Archive by Node Type module does not construct its SQL query to respect no...