CVE-2022-49626

The Linux kernel contains a use-after-free vulnerability within the sfc driver when disabling SRIOV . The issue occurs because vf->pci_dev is freed during pci_disable_sriov but subsequently accessed in efx_ef10_sriov_free_vf_vports, which is called via efx_ef10_sriov_free_vf_vswitching. This v...

CVE-2024-56599

CVE-2024-56599 records a Linux kernel vulnerability in the wifi/ath10k SDIO path where rmmod ath10k could panic if CONFIG_INIT_ON_FREE_DEFAULT_ON is enabled. The root cause is a NULL-pointer path involving destroying the sdio workqueue before ath10k_core_destroy frees the wiphy/cfg80211 device, l...