49 matches found
CVE-2025-68789
The CVE-2025-68789 entry describes a Linux kernel hwmon driver issue (ibmpex) in the high/low store callback. The problem is a race condition: ibmpex_high_low_store() retrieves driver data with dev_get_drvdata() and uses it without validation, allowing a use-after-free if the data structure has b...
CVE-2025-68789 hwmon: (ibmpex) fix use-after-free in high/low store
In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex fix use-after-free in high/low store The ibmpexhighlowstore function retrieves driver data using devgetdrvdata and uses it without validation. This creates a race condition where the sysfs callback can be invoked...
CVE-2025-68789
Removed by vendor...
Linux Distros Unpatched Vulnerability : CVE-2025-68789
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: ibmpex fix use-after-free in high/low store The ibmpexhighlowstore function retrieves driver data using devgetdrvdata and uses it without validation. Thi...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992941)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992941 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows:...
PT-2026-2521
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ibmpex high low store function in the Linux kernel does not validate driver data retrieved using dev get drvdata. This creates a race condition where the sysfs callback can be invoke...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986824)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986824 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows:...
kernel: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...
Linux Distros Unpatched Vulnerability : CVE-2022-49029
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' no...
CLSA-2024-1733158910 kernel: Fix of 6 CVEs
hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails CVE-2022-49029 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - ext4: no need to continue when the number of entries is 1 CVE-2024-49967 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - packet: in...
The vulnerability of the ibmpex_register_bmc() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ibmpexregisterbmc function in the drivers/hwmon/ibmpex.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
CLSA-2024-1731430561 kernel: Fix of 31 CVEs
driver core: bus: Fix double free in driver API busregister CVE-2024-50055 - net: tun: Fix use-after-free in tundetach CVE-2022-49014 - memcg: fix possible use-after-free in memcgwriteeventcontrol CVE-2022-48988 - ppp: fix pppasyncencode illegal access CVE-2024-50035 - drivers: media:...
SUSE CVE-2022-49029
In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...
CVE-2022-49029
In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-;list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...
CVE-2022-49029
In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...
DEBIAN-CVE-2022-49029
In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...
UBUNTU-CVE-2022-49029
In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...
CVE-2022-49029 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex Fix possible UAF when ibmpexregisterbmc fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpexregisterbmc warn: '&data-list' not removed from list If ibmpexfindsensors fails in ibmpexregisterbmc,...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from potential post-release reuse of the ibmpex driver in the hwmon component in the event of a registration...