kernel: RDMA/rxe: Fix mr->map double free

A double-free vulnerability was found in the Linux kernel RDMA RXE soft-RoCE driver's memory region handling. A local user with access to RDMA userspace verbs can register a memory region with parameters that cause initialization to fail, triggering error handling code that frees the mr-map...

DEBIAN-CVE-2023-53758

In the Linux kernel, the following vulnerability has been resolved: spi: atmel-quadspi: Free resources even if runtime resume failed in .remove An early error exit in atmelqspiremove doesn't prevent the device unbind. So this results in an spi controller with an unbound parent and unmapped regist...

DEBIAN-CVE-2022-50624

In the Linux kernel, the following vulnerability has been resolved: net: netsec: fix error handling in netsecregistermdio If phydeviceregister fails, phydevicefree need be called to put refcount, so memory of phy device and device name can be freed in callback function. If getphydevice fails,...

DEBIAN-CVE-2022-50622

In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential memory leak in ext4fcrecordmodifiedinode As krealloc may return NULL, in this case 'state-fcmodifiedinodes' may not be freed by krealloc, but 'state-fcmodifiedinodes' already set NULL. Then will lead to...

CVE-2022-50617

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/powerplay/psm: Fix memory leak in power state init Commit 902bc65de0b3 "drm/amdgpu/powerplay/psm: return an error in power state init" made the power state init function return early in case of failure to get an entry...

UBUNTU-CVE-2022-50624

In the Linux kernel, the following vulnerability has been resolved: net: netsec: fix error handling in netsecregistermdio If phydeviceregister fails, phydevicefree need be called to put refcount, so memory of phy device and device name can be freed in callback function. If getphydevice fails,...

UBUNTU-CVE-2023-53758

In the Linux kernel, the following vulnerability has been resolved: spi: atmel-quadspi: Free resources even if runtime resume failed in .remove An early error exit in atmelqspiremove doesn't prevent the device unbind. So this results in an spi controller with an unbound parent and unmapped regist...

CVE-2023-53758

The CVE-2023-53758 issue concerns the Linux kernel driver for the Atmel QuadSPI (spi: atmel-quadspi). The vulnerability arises when an early error path in atmel_qspi_remove() unbinds the device without properly freeing resources, leaving the SPI controller with an unbound parent and unmapped regi...

CVE-2023-53758

In the Linux kernel, the following vulnerability has been resolved: spi: atmel-quadspi: Free resources even if runtime resume failed in .remove An early error exit in atmelqspiremove doesn't prevent the device unbind. So this results in an spi controller with an unbound parent and unmapped regist...

CVE-2023-53758 spi: atmel-quadspi: Free resources even if runtime resume failed in .remove()

In the Linux kernel, the following vulnerability has been resolved: spi: atmel-quadspi: Free resources even if runtime resume failed in .remove An early error exit in atmelqspiremove doesn't prevent the device unbind. So this results in an spi controller with an unbound parent and unmapped regist...

CVE-2022-50629 wifi: rsi: Fix memory leak in rsi_coex_attach()

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Fix memory leak in rsicoexattach The coexcb needs to be freed when rsicreatekthread failed in rsicoexattach...

SUSE CVE-2025-40267

In the Linux kernel, the following vulnerability has been resolved: iouring/rw: ensure allocated iovec gets cleared for early failure A previous commit reused the recyling infrastructure for early cleanup, but this is not enough for the case where our internal caches have overflowed. If this...

PT-2025-49465

In the Linux kernel, the following vulnerability has been resolved: net: netsec: fix error handling in netsec register mdio If phy device register fails, phy device free need be called to put refcount, so memory of phy device and device name can be freed in callback function. If get phy device...

PT-2025-49612

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to hotplug callback handling within the marvell cn10k driver. Specifically, the tad pmu init function does not remove a callback added by cpuhp...

The vulnerability in the sound/core/pcm_native.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the sound/core/pcmnative.c module of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ndo_open() function in the drivers/net/usb/asix_devices.c module of the USB device support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ndoopen function in the drivers/net/usb/asixdevices.c module of the Linux USB device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Vulnerability of the mlx5_ib_dev_res_init() function in the drivers/infiniband/hw/mlx5/main.c module – This driver is part of the Linux operating system’s InfiniBand support mechanism, which allows a hacker to cause a service failure.

Vulnerability of the mlx5ibdevresinit function in the drivers/infiniband/hw/mlx5/main.c module – The Linux kernel’s InfiniBand driver relies on pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the test_format_fill_silence() function in the sound/core/sound_kunit.c module, which supports Linux kernel-based audio cards, allows a hacker to trigger a service failure.

The vulnerability of the testformatfillsilence function in the sound/core/soundkunit.c module, which is part of Linux’s kernel-based audio card support, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mptcp_pernet_set_defaults() function in the net/mptcp/ctrl.c module of the MPTCP protocol implementation in Linux’s kernel allows a attacker to cause a service failure.

The vulnerability of the mptcppernetsetdefaults function in the net/mptcp/ctrl.c module of the MPTCP protocol implementation in Linux’s kernel is related to pointer manipulation. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the check_btf_line() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the checkbtfline function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service...