PT-2025-37675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the watchdog cdev register function. The issue occurs because put device is not called when cdev device add fails and wdd-id is not equal to 0,...

SUSE CVE-2020-10690

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptpclock and cdev while resource deallocation. When a high privileged process allocates a ptp device file like /dev/ptpX and voluntarily goes to sleep. During this time if the underlying device ...

GSD-2023-1001388 usb: gadget: f_hid: fix f_hidg lifetime vs cdev

usb: gadget: fhid: fix fhidg lifetime vs cdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001380 gpiolib: cdev: fix NULL-pointer dereferences

gpiolib: cdev: fix NULL-pointer dereferences This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001065 gpiolib: cdev: fix NULL-pointer dereferences

gpiolib: cdev: fix NULL-pointer dereferences This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000652 gpiolib: cdev: fix NULL-pointer dereferences

gpiolib: cdev: fix NULL-pointer dereferences This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-34142 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue concerns NULL-pointer dereferences in the gpiolib cdev. It was introduced in version v4.8 and fixed in Linux Kernel version v5.15.86. The actual impact and attack plausibility hav...

PT-2023-33731 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns error handling in the cdev device add function. It was introduced in version v4.12 and is fixed in Linux Kernel version v6.0.16. The actual impact and attack plausibility...

PT-2023-33886 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a missing put device in mport cdev open, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

GSD-2022-1006594 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

gpiolib: cdev: Set lineeventstate::irq after IRQ register successfully This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.146 by commit...

GSD-2022-1006573 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

gpiolib: cdev: Set lineeventstate::irq after IRQ register successfully This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.71 by commit...

GSD-2022-1006536 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully

gpiolib: cdev: Set lineeventstate::irq after IRQ register successfully This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.12 by commit...

PT-2022-34749 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue is related to the gpiolib, specifically with the cdev and lineevent state::irq. It was introduced in version v5.9 and fixed in version v6.0. The actual impact and attack plausibility...

PT-2022-34829 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.71 Description: The issue is related to the gpiolib, specifically with the cdev and lineevent state::irq. It was introduced in version v5.9 and fixed in version v5.15.71. The actual impact and attack...

PT-2022-31580

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue concerns error handling in the idxd cdev register function. It was introduced in version v5.6 and fixed in version v5.15.46. The actual impact and attack plausibility have not yet...

PT-2022-31827

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns error handling in the idxd cdev register function. It was introduced in version v5.6 and fixed in version v5.10.121. The actual impact and attack plausibility have not yet...

PT-2022-30949

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns an error handling path in the idxd cdev register function. It was introduced in version v5.6 and fixed in version v5.18.3. The actual impact and attack plausibility have not...

PT-2022-31288

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.17.13 Description The issue concerns error handling in the idxd cdev register function. It was introduced in version v5.6 and fixed in version v5.17.14. The actual impact and attack plausibility have not y...

GSD-2022-1000154 rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev

rpmsg: char: Fix race between the release of rpmsgctrldev and cdev This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.176 by commit...

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.

...