CVE-2022-49524 media: pci: cx23885: Fix the error handling in cx23885_initdev()

In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885initdev When the driver fails to call the dmasetmask, the driver will get the following splat: 55.853884 BUG: KASAN: use-after-free in processremoveddriver+0x3c/0x240 55.85448...

CVE-2022-49524

CVE-2022-49524 relates to the Linux kernel media driver for cx23885 (pci) where the error path in cx23885_initdev() did not release I2C-related resources when dma_set_mask() failed. The concrete details describe that a failed dma_set_mask() leads to a use-after-free in __process_removed_driver, t...

CVE-2022-49524

In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885initdev When the driver fails to call the dmasetmask, the driver will get the following splat: 55.853884 BUG: KASAN: use-after-free in processremoveddriver+0x3c/0x240 55.85448...

CVE-2022-49514

Concrete details available: CVE-2022-49514 concerns the Linux kernel ASoC Mediatek driver, specifically a fix in the mt8173_max98090_dev_probe error path. The root issue was a refcount leak in the error path, and the remediation is to call of_node_put(platform_node) to avoid the leak. Connected a...

CVE-2022-49514 ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Fix error handling in mt8173max98090devprobe Call ofnodeputplatformnode to avoid refcount leak in the error path...

CVE-2022-49514 ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Fix error handling in mt8173max98090devprobe Call ofnodeputplatformnode to avoid refcount leak in the error path...

CVE-2022-49514 ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Fix error handling in mt8173max98090devprobe Call ofnodeputplatformnode to avoid refcount leak in the error path...

CVE-2022-49514

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Fix error handling in mt8173max98090devprobe Call ofnodeputplatformnode to avoid refcount leak in the error path...

CVE-2022-49512 mtd: rawnand: denali: Use managed device resources

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: denali: Use managed device resources All of the resources used by this driver has managed interfaces, so use them. Otherwise we will get the following splat: 4.472703 denali-nand-pci 0000:00:05.0: timeout while...

CVE-2022-49507

In the Linux kernel, the following vulnerability has been resolved: regulator: da9121: Fix uninit-value in da9121assignchipmodel KASAN report slab-out-of-bounds in regmapinit as follows: BUG: KASAN: slab-out-of-bounds in regmapinit drivers/base/regmap/regmap.c:841 Read of size 1 at addr...

CVE-2022-49497

CVE-2022-49497 is a Linux kernel issue in the networking code where two BUG() calls were present in skb_checksum_help(). The vulnerability was resolved by removing these BUG()s and replacing them with WARN_ON_ONCE() so skb_checksum_help() can return an error code instead of triggering a crash whe...

CVE-2022-49495

CVE-2022-49495 : In the Linux kernel, the drm/msm/hdmi driver fails to check the return value of platform_get_resource_byname(), which can lead to a null-pointer dereference if NULL is returned. The issue has been fixed by applying a patch that adds the necessary NULL check (Patchwork: 482992). S...

CVE-2022-49493 ASoC: rt5645: Fix errorenous cleanup order

In the Linux kernel, the following vulnerability has been resolved: ASoC: rt5645: Fix errorenous cleanup order There is a logic error when removing rt5645 device as the function rt5645i2cremove first cancel the &rt5645-jackdetectwork and delete the &rt5645-btnchecktimer latter. However, since the...

CVE-2022-49492 nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix a NULL pointer dereference in nvmeallocadmintags In nvmeallocadmintags, the adminq can be set to an error typically -ENOMEM if the blkmqinitqueue call fails to set up the queue, which is checked immediately after th...

CVE-2022-49490

CVE-2022-49490: In the Linux kernel, drm/msm/mdp5 had a NULL dereference risk in mdp5_pipe_release when mdp5_get_global_state could return an error (-EDEADLK) during modeset lock handling. The fix propagates such errors from mdp5_get_global_state to mdp5_pipe_release and returns a proper error in...

CVE-2022-49490

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Return error code in mdp5piperelease when deadlock is detected mdp5getglobalstate runs the risk of hitting a -EDEADLK when acquiring the modeset lock, but currently mdp5piperelease doesn't check for if an error is...

CVE-2022-49488 drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Return error code in mdp5mixerrelease when deadlock is detected There is a possibility for mdp5getglobalstate to return -EDEADLK when acquiring the modeset lock, but currently globalstate in mdp5mixerrelease doesn't...

CVE-2022-49486

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: Fix refcount leak in imxsgtl5000probe offindi2cdevicebynode takes a reference, In error paths, we should call putdevice to drop the reference to aviod refount leak...

CVE-2022-49469

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix anondev leak in createsubvol When btrfsqgroupinherit, btrfsalloctreeblock, or btrfsinsertroot fail in createsubvol, we return without freeing anondev. Reorganize the error handling in createsubvol to fix this...

CVE-2022-49469 btrfs: fix anon_dev leak in create_subvol()

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix anondev leak in createsubvol When btrfsqgroupinherit, btrfsalloctreeblock, or btrfsinsertroot fail in createsubvol, we return without freeing anondev. Reorganize the error handling in createsubvol to fix this...