kernel: driver core: fix resource leak in device_add()

A reference leak was found in the Linux kernel's driver core device registration logic. When kobjectadd fails partway through deviceadd, the error cleanup attempts to free resources but fails because kobjectadd has already cleared the device's parent pointer. This prevents cleanupgluedir from...

PT-2025-18619

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel. The problem occurs when the device add disk function fails, causing memory allocated in wbt enable default to not be released...

PT-2025-37675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the watchdog cdev register function. The issue occurs because put device is not called when cdev device add fails and wdd-id is not equal to 0,...

PT-2025-40757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists within the driver core, specifically in the device add function. When kobject add fails during the device add process, the cleanup glue dir function is called to...

PT-2023-33731 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns error handling in the cdev device add function. It was introduced in version v4.12 and is fixed in Linux Kernel version v6.0.16. The actual impact and attack plausibility...

PT-2025-54167

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3+ Description The Linux kernel contains a flaw in the driver core, specifically a potential null-pointer dereference in the device add function. This issue occurs when a device is added, and an error...

PT-2022-36013 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns a possible memory leak in the siox device add function. This problem was introduced in version v4.16 and is fixed in Linux Kernel version v6.0.10. The actual impact and...

PT-2025-37584

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc2-00005-g307c1086d7c9 Description The Linux kernel contains an issue in cdev device add related to error handling. Specifically, if device add is injected with a fault and returns an error, and dev-devt i...

Unbreakable Enterprise kernel security update

5.15.0-4.70.5.2 - Revert 'sched: Remove the limitation of WFONCPU on wakelist if wakee cpu is idle' Samasth Norway Ananda Orabug: 34783367 5.15.0-4.70.5.1 - NFSv4: Fixes for nfs4inodereturndelegation Trond Myklebust Orabug: 34751176 5.15.0-4.70.5 - uek: kabi: update kABI files for new symbols Sae...

PT-2022-35287 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to the Bluetooth hci sysfs in the Linux Kernel, where an attempt to call device add multiple times could potentially lead to a security vulnerability. The actual impact...

PT-2022-35051 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A memory leak issue was discovered in the Linux Kernel. The issue occurs when the platform device add function fails. The actual impact and attack plausibility have not yet been proven...

PT-2022-35641

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.220 Description The issue is related to the Bluetooth hci sysfs component in the Linux Kernel. It involves attempting to call device add multiple times. The actual impact and attack plausibility have not yet...

PT-2022-35494 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to the Bluetooth hci sysfs in the Linux Kernel, where an attempt to call device add multiple times could potentially lead to a security vulnerability. The actual impac...

PT-2022-35015 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the Bluetooth hci sysfs component in the Linux Kernel. It involves attempting to call device add multiple times. The actual impact and attack plausibility have not yet...

PT-2022-35312

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description A memory leak issue was discovered in the Linux Kernel. The issue occurs when the platform device add function fails. The actual impact and attack plausibility have not yet been proven...

PT-2022-37994

Уязвимость функции siox device add модуля drivers/siox/siox-core.c ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2021-4150

A use-after-free flaw was found in the addpartition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when deviceadd call fails when adding a partition to the disk...

CVE-2021-4150

A use-after-free flaw was found in the addpartition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when deviceadd call fails when adding a partition to the disk...

UBUNTU-CVE-2021-4150

A use-after-free flaw was found in the addpartition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when deviceadd call fails when adding a partition to the disk...

PT-2021-6480 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free flaw was found in the add partition function in the Linux kernel, specifically in the block/partitions/core.c file. This issue can be exploited by a local attacker wit...