CVE-2023-52858 clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629: Add check for mtkallocclkdata Add the check for the return value of mtkallocclkdata in order to avoid NULL pointer dereference...

CVE-2023-52858

CVE-2023-52858 (Linux kernel) : A NULL pointer dereference in Mediatek clock handling was fixed by adding a check for the return value of mtk_alloc_clk_data() in clk-mt7629. The patch prevents NULL dereference when allocating clock data, addressing a local dereference vulnerability in the Mediate...

CVE-2023-52858

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: clk-mt7629: Add check for mtkallocclkdata Add the check for the return value of mtkallocclkdata in order to avoid NULL pointer dereference...

CVE-2021-47372 net: macb: fix use after free on rmmod

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use after free on rmmod platdev-dev-platformdata is released by platformdeviceunregister, use of pclk and hclk is a use-after-free. Since device unregister won't need a clk device we adjust the function call sequen...

PT-2024-11242 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to resource leaks in the mtk phy init function. To fix this, clk disable unprepare is used in the error path of mtk phy init. This resolves some resource leaks in...

CVE-2024-27433

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clkmt8135apmixedprobe 'clkdata' is allocated with mtkdevmallocclkdata. So calling mtkfreeclkdata explicitly in the remove function would lead to a double-free. Remov...

CVE-2024-27433

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clkmt8135apmixedprobe 'clkdata' is allocated with mtkdevmallocclkdata. So calling mtkfreeclkdata explicitly in the remove function would lead to a double-free. Remov...

CVE-2024-27433

CVE-2024-27433 affects the Linux kernel clock driver: mediatek mt7622-apmixedsys. The root cause was an error path where clk_data, allocated via mtk_devm_alloc_clk_data(), could be double-freed if mtk_free_clk_data() remained in the remove path. The fix removes this redundant deallocation in the ...

CVE-2024-27433 clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clk_mt8135_apmixed_probe()

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: mt7622-apmixedsys: Fix an error handling path in clkmt8135apmixedprobe 'clkdata' is allocated with mtkdevmallocclkdata. So calling mtkfreeclkdata explicitly in the remove function would lead to a double-free. Remov...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the clkmt8135apmixedprobe function error handling path...

SUSE CVE-2024-27038

In the Linux kernel, the following vulnerability has been resolved: clk: Fix clkcoreget NULL dereference It is possible for clkcoreget to dereference a NULL in the following sequence: clkcoreget ofclkgethwfromclkspec ofclkgethwfromprovider clkgethw clkgethw can return NULL which is dereferenced b...

CVE-2024-27039

An erroneous devmkfree flaw was found in the Linux kernel in drivers/clk/hisilicon/clk-hi3559a.c. This issue may lead to a crash...

CVE-2024-26970

A vulnerability was found in the Linux Kernel's qcom gcc-ipq6018.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-26968

A vulnerability was found in the Linux Kernel's qcom gcc-ipq9574.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-26967

A vulnerability was found in the Linux Kernel's qcom camcc-sc8280xp.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor, as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-26965

A vulnerability was found in the Linux Kernel's qcom mmcc-msm8974.c driver, where out-of-bounds access can occur when the frequency table arrays are traversed by functions like qcomfindfreq or qcomfindfreqfloor as the arrays are not terminated with an empty element. This can lead to memory...

CVE-2024-27004

In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walking tree during disableunused Doug reported 1 the following hung task: INFO: task swapper/0:1 blocked for more than 122 seconds. Not tainted 5.15.149-21875-gf795ebc40eb8 1 "echo 0...

CVE-2024-27002

The following vulnerability has been resolved in the Linux kernel: clk: mediatek: Fix - Do a runtime PM get on controllers during probe...

CVE-2024-27037

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc in zynqclksetup will return null if the physical memory has run out. As a result, if we use snprintf to write data to the null address, the null...

CVE-2024-27037

In the Linux kernel, the following vulnerability has been resolved: clk: zynq: Prevent null pointer dereference caused by kmalloc failure The kmalloc in zynqclksetup will return null if the physical memory has run out. As a result, if we use snprintf to write data to the null address, the null...