ROS-20260928-73-0111

The vulnerability of the topologyparsecpucapacity function in the drivers/base/archtopology.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Distros Unpatched Vulnerability : CVE-2026-97479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - driver core: Avoid warning when removing a device while its supplier is unbinding During driver removal, the following warning can appear: WARNING: CPU: 1 PID:...

drivers/base/memory: set mem->altmap after successful device registration

...

CVE-2026-64244: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem-altmap after successful device registration If addmemoryblock fails at xastore under memory pressure for example, deviceunregister is called, which eventually triggers memoryblockrelease with mem-altm...

CVE-2026-64182: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblknrpoisoninc and memblknrpoisonsub look up a memory block via findmemoryblockbyid, which acquires a reference to the memory block device. Both helpers...

PT-2026-61499

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory block reference leak occurs in poison accounting. The functions memblk nr poison inc and memblk nr poison sub utilize find memory block by id to look up a memory block, which...

The vulnerability of the device_add() function in the drivers/base/core.c driver for Linux kernel-based peripheral devices allows a attacker to cause a service failure.

The vulnerability of the deviceadd function in the drivers/base/core.c file of the Linux kernel’s device driver framework is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `register_node()` function in the `drivers/base/node.c` module of the Linux kernel’s device driver support framework allows a malicious actor to cause a system crash.

The vulnerability of the registernode function in the drivers/base/node.c file of the Linux kernel’s device driver framework is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the __class_register() function in the drivers/base/class.c file of the Linux kernel device driver framework allows a attacker to cause a service failure.

The vulnerability of the classregister function in the drivers/base/class.c file of the Linux kernel’s device driver framework is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2023-53596: Double Free

In the Linux kernel, the following vulnerability has been resolved: drivers: base: Free devm resources when unregistering a device In the current code, devresreleaseall only gets called if the device has a bus and has been probed. This leads to issues when using bus-less or driver-less devices...

SUSE CVE-2023-53390

In the Linux kernel, the following vulnerability has been resolved: drivers: base: dd: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove...

Linux Distros Unpatched Vulnerability : CVE-2023-53409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers: base: component: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will...

CVE-2023-53409 drivers: base: component: fix memory leak with using debugfs_lookup()

In the Linux kernel, the following vulnerability has been resolved: drivers: base: component: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call...

CVE-2023-53390 drivers: base: dd: fix memory leak with using debugfs_lookup()

In the Linux kernel, the following vulnerability has been resolved: drivers: base: dd: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove...

CVE-2023-53390: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: drivers: base: dd: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove...

CVE-2023-53409: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: drivers: base: component: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call...

CVE-2022-49442: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: drivers/base/node.c: fix compaction sysfs file leak Compaction sysfs file is created via compactionregisternode in registernode. But we forgot to remove it in unregisternode. Thus compaction sysfs file is leaked. Using...

PT-2025-11018

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue has been identified in the Linux kernel. The problem arises because a device without a release function is considered broken and must be fixed. The current code...

The vulnerability of the bus_register() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the busregister function in the drivers/base/bus.c module of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

CVE-2021-47410 drm/amdkfd: fix svm_migrate_fini warning

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix svmmigratefini warning Device manager releases device-specific resources when a driver disconnects from a device, devmmemunmappages and devmreleasememregion calls in svmmigratefini are redundant. It causes below...