CVE-2022-50351 cifs: Fix xid leak in cifs_create()

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifscreate If the cifs already shutdown, we should free the xid before return, otherwise, the xid will be leaked...

CVE-2022-50351

CVE-2022-50351 affects the Linux kernel CIFS subsystem. The issue stems from leaking an xid in cifs_create() when the CIFS session is shutdown, as the xid is not freed before returning. The vulnerability results in an xid leak (resource exhaustion potential) and has a fixed in the Linux kernel vi...

CVE-2023-53289

In the Linux kernel, the following vulnerability has been resolved: media: bdisp: Add missing check for createworkqueue Add the check for the return value of the createworkqueue in order to avoid NULL pointer dereference...

DEBIAN-CVE-2023-53289

In the Linux kernel, the following vulnerability has been resolved: media: bdisp: Add missing check for createworkqueue Add the check for the return value of the createworkqueue in order to avoid NULL pointer dereference...

CVE-2023-53271

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix unreferenced object reported by kmemleak in ubiresizevolume There is a memory leaks problem reported by kmemleak: unreferenced object 0xffff888102007a00 size 128: comm "ubirsvol", pid 32090, jiffies 4298464136 age...

UBUNTU-CVE-2023-53289

In the Linux kernel, the following vulnerability has been resolved: media: bdisp: Add missing check for createworkqueue Add the check for the return value of the createworkqueue in order to avoid NULL pointer dereference...

CVE-2023-53289 media: bdisp: Add missing check for create_workqueue

In the Linux kernel, the following vulnerability has been resolved: media: bdisp: Add missing check for createworkqueue Add the check for the return value of the createworkqueue in order to avoid NULL pointer dereference...

CVE-2023-53289

The CVE-2023-53289 issue affects the Linux kernel, specifically the media/bdisp component. The root cause is a missing check for the return value of create_workqueue, which could lead to a NULL pointer dereference. The publicly available connected documents confirm a fix that adds the necessary c...

CVE-2023-53289 media: bdisp: Add missing check for create_workqueue

In the Linux kernel, the following vulnerability has been resolved: media: bdisp: Add missing check for createworkqueue Add the check for the return value of the createworkqueue in order to avoid NULL pointer dereference...

CVE-2023-53289 media: bdisp: Add missing check for create_workqueue

In the Linux kernel, the following vulnerability has been resolved: media: bdisp: Add missing check for createworkqueue Add the check for the return value of the createworkqueue in order to avoid NULL pointer dereference...

CVE-2023-53263

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/disp: fix use-after-free in error handling of nouveauconnectorcreate We can't simply free the connector after calling drmconnectorinit on it. We need to clean up the drm side first. It might not fix all regressions fr...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked createsinglethreadworkqueue return value that could result in a null pointer dereference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the cifscreate function not releasing the xid when cifs is closed, which could lead to an xid leak...

PT-2025-37894

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A missing check for the return value of the create workqueue function could lead to a NULL pointer dereference in the media subsystem bdisp driver. Recommendations: At the moment, ther...

PT-2025-37876

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak was identified in the UBI Unsorted Block Images module within the Linux kernel, specifically within the ubi resize volume function. The issue stems from a mismatch betwee...

PT-2025-38025

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free issue in the do rbd add function when rbd dev create fails. This occurs when ownership of structures like rbd dev-rbd client, rbd dev-spec, a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from memory created by ubiebacreatetable in the ubiresizevolume function that is not properly freed, potentially...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue in the nouveauconnectorcreate error handling...

CLSA-2025-1757961506 kernel: Fix of 26 CVEs

posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - xfrm: state: fix out-of-bounds read during lookup CVE-2024-57982 - nfsd: fix race between laundromat and freestateid CVE-2024-50106 - nfsd: split scstatus out of sctype CVE-2024-50106 - nfsd: avoid race...

GHSA-JJ4J-X5WW-CWH9 Before action, Ash's hooks may execute in certain scenarios despite a request being forbidden

Summary Certain bulk action calls with a beforetransaction hook and no aftertransaction hook, will call the beforetransaction hook before authorization is checked and a Forbidden error is returned, when called as a bulk action. The impact is that a malicious user could cause a beforetransaction t...