CVE-2022-49448

CVE-2022-49448 affects the Linux kernel, specifically the bcm soc path, where code that uses devm_kzalloc() may receive a NULL return. If allocation fails and the NULL is not checked, subsequent use of pd->pmb and related code can trigger a null pointer dereference. The description in the Init...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unchecked NULL return from devmkzalloc...

The vulnerability of the devm_kzalloc function in the pcmdevice_i2c_probe component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the devmkzalloc function in the pcmdevicei2cprobe component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2024-56766

The CVE-2024-56766 issue affects the Linux kernel’s MTD/NAND path (mtd: rawnand) with a double-free in atmel_pmecc_create_user(). The root cause is allocating the user object with kzalloc() and then freeing it with kfree() after converting the allocation to devm_kzalloc(), leading to a use-after-...

AZL-55515 CVE-2024-53205 affecting package kernel for versions less than 6.6.85.1-1

In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtkusb2phyprobe In rtkusb2phyprobe devmkzalloc may return NULL but this returned value is not checked...

CVE-2024-49992 drm/stm: Avoid use-after-free issues with crtc and plane

In the Linux kernel, the following vulnerability has been resolved: drm/stm: Avoid use-after-free issues with crtc and plane ltdcload calls functions drmcrtcinitwithplanes, drmuniversalplaneinit and drmencoderinit. These functions should not be called with parameters allocated with devmkzalloc to...

DEBIAN-CVE-2022-48907

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: lcd2s: Fix memory leak in -remove Once allocated the struct lcd2sdata is never freed. Fix the memory leak by switching to devmkzalloc...

CVE-2022-48907 auxdisplay: lcd2s: Fix memory leak in ->remove()

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: lcd2s: Fix memory leak in -remove Once allocated the struct lcd2sdata is never freed. Fix the memory leak by switching to devmkzalloc...

CVE-2024-43822

In the Linux kernel, the following vulnerability has been resolved: ASoc: PCM6240: Return directly after a failed devmkzalloc in pcmdevicei2cprobe The value “-ENOMEM” was assigned to the local variable “ret” in one if branch after a devmkzalloc call failed at the beginning. This error code will...

CVE-2024-43822

In the Linux kernel, the following vulnerability has been resolved: ASoc: PCM6240: Return directly after a failed devmkzalloc in pcmdevicei2cprobe The value “-ENOMEM” was assigned to the local variable “ret” in one if branch after a devmkzalloc call failed at the beginning. This error code will...

CVE-2024-43822

CVE-2024-43822 is a Linux kernel vulnerability affecting the ASoc PCM6240 path, where a failed devm_kzalloc() in pcmdevice_i2c_probe() previously allowed a pcmdevice_remove() with a null pointer, risking dereference. The root cause is returning the wrong error path after an allocation failure, wh...

CVE-2024-43822 ASoc: PCM6240: Return directly after a failed devm_kzalloc() in pcmdevice_i2c_probe()

In the Linux kernel, the following vulnerability has been resolved: ASoc: PCM6240: Return directly after a failed devmkzalloc in pcmdevicei2cprobe The value “-ENOMEM” was assigned to the local variable “ret” in one if branch after a devmkzalloc call failed at the beginning. This error code will...

CVE-2024-43822

In the Linux kernel, the following vulnerability has been resolved: ASoc: PCM6240: Return directly after a failed devmkzalloc in pcmdevicei2cprobe The value “-ENOMEM” was assigned to the local variable “ret” in one if branch after a devmkzalloc call failed at the beginning. This error code will...

CVE-2024-40973

A flaw was found in the mtk-vcodec module in the Linux kernel. The mtkvcodecfwscpinit function in the drivers/media/platform/mediatek/vcodec/common/mtkvcodecfwscp.c file does not check the return value of the devmkzalloc function, potentially resulting in a NULL pointer dereference...

CVE-2024-40973 media: mtk-vcodec: potential null pointer deference in SCP

In the Linux kernel, the following vulnerability has been resolved: media: mtk-vcodec: potential null pointer deference in SCP The return value of devmkzalloc needs to be checked to avoid NULL pointer deference. This is similar to CVE-2022-3113...

CVE-2024-35883

In the Linux kernel, the following vulnerability has been resolved: spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxxspiprobe In function pci1xxxxspiprobe, there is a potential null pointer that may be caused by a failed memory allocation by the function devmkzalloc. Hence, a...

CVE-2024-35883 spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe

In the Linux kernel, the following vulnerability has been resolved: spi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxxspiprobe In function pci1xxxxspiprobe, there is a potential null pointer that may be caused by a failed memory allocation by the function devmkzalloc. Hence, a...

DEBIAN-CVE-2023-52465

In the Linux kernel, the following vulnerability has been resolved: power: supply: Fix null pointer dereference in smb2probe devmkasprintf and devmkzalloc return a pointer to dynamically allocated memory which can be NULL upon failure...

CVE-2023-52465 power: supply: Fix null pointer dereference in smb2_probe

In the Linux kernel, the following vulnerability has been resolved: power: supply: Fix null pointer dereference in smb2probe devmkasprintf and devmkzalloc return a pointer to dynamically allocated memory which can be NULL upon failure...

CVE-2023-52465 power: supply: Fix null pointer dereference in smb2_probe

In the Linux kernel, the following vulnerability has been resolved: power: supply: Fix null pointer dereference in smb2probe devmkasprintf and devmkzalloc return a pointer to dynamically allocated memory which can be NULL upon failure...