CVE-2024-40991

CVE-2024-40991 pertains to the Linux kernel DMA engine, specifically the TI k3-udma-glue helper of_k3_udma_glue_parse_chn_by_id(). The issue: the function calls of_node_put() on the udmax_np device-node without previously incrementing its reference count, risking improper reference management. A ...

CVE-2022-48723 spi: uniphier: fix reference count leak in uniphier_spi_probe()

In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphierspiprobe The issue happens in several error paths in uniphierspiprobe. When either dmagetslavecaps or devmspiregistermaster returns an error code, the function forgets to decreas...

CVE-2023-52520 platform/x86: think-lmi: Fix reference leak

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix reference leak If a duplicate attribute is found using ksetfindobj, a reference to that attribute is returned which needs to be disposed accordingly using kobjectput. Move the setting name validation...

CVE-2023-52520 platform/x86: think-lmi: Fix reference leak

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix reference leak If a duplicate attribute is found using ksetfindobj, a reference to that attribute is returned which needs to be disposed accordingly using kobjectput. Move the setting name validation...

SUSE-SU-2023:1860-1 Security update for wayland

This update for wayland fixes the following issues: - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. bsc1190486...

GSD-2022-1007108 bpf: Fix reference state management for synchronous callbacks

bpf: Fix reference state management for synchronous callbacks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

GSD-2022-1003292 ksmbd: fix reference count leak in smb_check_perm_dacl()

ksmbd: fix reference count leak in smbcheckpermdacl This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...

UVI-2021-1000354 i2c: imx: fix reference leak when pm_runtime_get_sync fails

i2c: imx: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000357 i2c: cadence: fix reference leak when pm_runtime_get_sync fails

i2c: cadence: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000354 i2c: imx: fix reference leak when pm_runtime_get_sync fails

i2c: imx: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000242 i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails

i2c: stm32f7: fix reference leak when pmruntimegetsync fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

WebKitGTK+ < 2.21.3 - pageURL Mishandling Crash (PoC) Exploit

webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash. Title: WebKitGTK+ win = window.open"sleeponesecond.php...

Solaris Update for Ghostscript 115836-05

Check for the Version of Ghostscript OpenVAS Vulnerability Test Solaris Update for Ghostscript 115836-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Solaris Update for usr/bin/mail 111874-09

Check for the Version of usr/bin/mail OpenVAS Vulnerability Test Solaris Update for usr/bin/mail 111874-09 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Solaris Update for truss 109025-07

Check for the Version of truss OpenVAS Vulnerability Test Solaris Update for truss 109025-07 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Solaris Update for Obsoleted by 116453-02

Check for the Version of Obsoleted by OpenVAS Vulnerability Test Solaris Update for Obsoleted by 116453-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...