CVE-2023-54221

In the Linux kernel, the following vulnerability has been resolved: clk: imx93: fix memory leak and missing unwind goto in imx93clocksprobe In function probe, it returns directly without unregistered hws when error occurs. Fix this by adding 'goto unregisterhws;' on line 295 and line 310. Use...

UBUNTU-CVE-2023-54207

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Correct devm device reference for hidinput inputdev name Reference the HID device rather than the input device for the devm allocation of the inputdev name. Referencing the inputdev would lead to a use-after-free wh...

UBUNTU-CVE-2023-54221

In the Linux kernel, the following vulnerability has been resolved: clk: imx93: fix memory leak and missing unwind goto in imx93clocksprobe In function probe, it returns directly without unregistered hws when error occurs. Fix this by adding 'goto unregisterhws;' on line 295 and line 310. Use...

UBUNTU-CVE-2023-54319

In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devmkasprintf devmkasprintf returns a pointer to dynamically allocated memory. Pointer could be NULL in case allocation fails. Check pointer validity. Identified with coccinelle kmerr.coc...

CVE-2023-54319

In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devmkasprintf devmkasprintf returns a pointer to dynamically allocated memory. Pointer could be NULL in case allocation fails. Check pointer validity. Identified with coccinelle kmerr.coc...

CVE-2023-54228 regulator: raa215300: Fix resource leak in case of error

In the Linux kernel, the following vulnerability has been resolved: regulator: raa215300: Fix resource leak in case of error The clkregisterclkdev allocates memory by calling vclkdevalloc and this memory is not freed in the error path. Similarly, resources allocated by clkregisterfixedrate are no...

CVE-2023-54221 clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe

In the Linux kernel, the following vulnerability has been resolved: clk: imx93: fix memory leak and missing unwind goto in imx93clocksprobe In function probe, it returns directly without unregistered hws when error occurs. Fix this by adding 'goto unregisterhws;' on line 295 and line 310. Use...

CVE-2023-54221

CVE-2023-54221 : In the Linux kernel, the imx93 clock driver had a memory leak and an improper error path in imx93_clocks_probe. The root cause was a path in probe() that returned without unregistration of hardware resources, potentially leaking memory. The fix, as documented in multiple vendor a...

CVE-2023-54207

CVE-2023-54207 affects the Linux kernel HID: uclogic driver. The root cause is using the input_dev name’s devm allocation instead of referencing the HID device, which could lead to a use-after-free when the input_dev is unregistered and a uevent depending on its name fires. The fix switches to re...

CVE-2023-54207

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Correct devm device reference for hidinput inputdev name Reference the HID device rather than the input device for the devm allocation of the inputdev name. Referencing the inputdev would lead to a use-after-free wh...

CVE-2023-54207 HID: uclogic: Correct devm device reference for hidinput input_dev name

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Correct devm device reference for hidinput inputdev name Reference the HID device rather than the input device for the devm allocation of the inputdev name. Referencing the inputdev would lead to a use-after-free wh...

PT-2025-53954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the qcom add sysmon subdev function within the remoteproc sysmon component. The function fails to free allocated memory when of irq get byname or devm request...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992280 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in astvhubinitdev The variable d-name, returned by...

PT-2025-54057

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the regulator subsystem related to the raa215300 driver. Specifically, memory allocated by clk register clkdev and resources allocated by clk register fixed rat...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992497)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992497 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: mux: reg: check return value after calling platformgetresource It will cause null-ptr-deref ...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992640)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992640 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: npcm: disable interrupt enable bit before devmrequestirq The customer reports that there is ...

PT-2025-54136

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/mediatek: Use devm of iomap to avoid resource leak in mtk thermal probe Smatch reports: 1. mtk thermal probe warn: 'apmixed base' from of iomap not released. 2. mtk thermal probe warn: 'auxadc base' from of iomap...

PT-2025-54050

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to memory management and resource handling within the imx93 clock driver. Specifically, the probe function does not properly release hardware...

EUVD-2023-60282

In the Linux kernel, the following vulnerability has been resolved: spmi: Add a check for remove callback when removing a SPMI driver When removing a SPMI driver, there can be a crash due to NULL pointer dereference if it does not have a remove callback defined. This is one such call trace observ...

CVE-2023-54097

In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: fix ofiomap leak Smatch reports: drivers/regulator/stm32-pwr.c:166 stm32pwrregulatorprobe warn: 'base' from ofiomap not released on lines: 151,166. In stm32pwrregulatorprobe, base is not released when...