SUSE CVE-2025-26598

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching...

CVE-2022-49553 fs/ntfs3: validate BOOT sectors_per_clusters

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate BOOT sectorsperclusters When the NTFS BOOT sectorsperclusters field is 0x80, it represents a shift value. Make sure that the shift value is not too large before using it NTFS max cluster size is 2MB. Return...

CVE-2022-49550

CVE-2022-49550 affects the Linux kernel ntfs3 filesystem. The root cause is the absence of the ‘invalidate_folio’ method, which leads to a memory leak where cached written data are not freed after unmount. The documented fix is to add a new implementation, block_invalidate_folio, to ntfs3 to reso...

CVE-2022-49549 x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails

In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Fix memory leak when thresholdcreatebank fails In mcethresholdcreatedevice, if thresholdcreatebank fails, the previously allocated threshold banks array @bp will be leaked because the call to mcethresholdremovedevice...

CVE-2022-49531

The CVE-2022-49531 issue concerns the Linux kernel loop driver’s handling of the lo_device stored in gendisk private data. The vulnerability fix updates the lifecycle so that the lo_device remains valid until the gendisk is freed, addressing a potential deadlock by relaxing safety checks in loop....

CVE-2022-49498 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Check for null pointer of pointer substream before dereferencing it Pointer substream is being dereferenced on the assignment of pointer card before substream is being null checked with the macro PCMRUNTIMECHECK...

CVE-2022-49495

CVE-2022-49495 : In the Linux kernel, the drm/msm/hdmi driver fails to check the return value of platform_get_resource_byname(), which can lead to a null-pointer dereference if NULL is returned. The issue has been fixed by applying a patch that adds the necessary NULL check (Patchwork: 482992). S...

CVE-2022-49494

The CVE-2022-49494 entry concerns the Linux kernel mtd: rawnand cadence driver vulnerability. The issue is a possible NULL pointer dereference in cadence_nand_dt_probe() when platform_get_resource() could return NULL, causing access to res to dereference. The fix reorders usage so res is only use...

CVE-2022-49466

CVE-2022-49466 affects the Linux kernel regulator: scmi subsystem. The root cause is a refcount leak in scmi_regulator_probe due to of_find_node_by_name() returning a node pointer with an incremented refcount; the patch adds a call to of_node_put() to release the node when done. This fix prevents...

CVE-2022-49423

Summary: CVE-2022-49423 relates to the Linux kernel where RTLA tracing could dereference a NULL record in several tracing tools. Root cause (as documented): NULL pointer dereference of the variable record in multiple files (osnoise_hist.c, osnoise_top.c, timerlat_hist.c, timerlat_top.c) before ca...

CVE-2022-49376

CVE-2022-49376 affects the Linux kernel SCSI subsystem (sd driver). The issue arises when sd_probe() hits an early error before sdkp->device is initialized, leading to a NULL pointer dereference inside sd_is_zoned() due to an unintended call to sd_zbc_release_disk(). The fix removes the sd_zbc...

CVE-2022-49342 net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: bgmac: Fix refcount leak in bcmamdiomiiregister ofgetchildbyname returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

CVE-2022-49342

CVE-2022-49342 affects the Linux kernel net/ethernet/bgmac path (bcma_mdio_mii_register) where of_get_child_by_name() increases the node refcount, causing a refcount leak. The root cause is missing of_node_put() on unused nodes. Patches add the missing of_node_put() to prevent leaks. Patched stat...

CVE-2022-49319

CVE-2022-49319 affects the Linux kernel, specifically iommu/arm-smmu-v3. The vulnerability is a NULL pointer dereference that occurs when platform_get_resource() returns NULL, due to a missing return-value check. Affected component/area: ARM SMMU platform resource handling in the IOMMU path. Impa...

CVE-2022-49292 ALSA: oss: Fix PCM OSS buffer allocation overflow

In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflow at vmalloc allocation that is called from sndpcmplugalloc. Although we apply the restrictions to input parameters, it's based only...

CVE-2022-49250 ASoC: codecs: rx-macro: fix accessing compander for aux

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fix accessing compander for aux AUX interpolator does not have compander, so check before accessing compander data for this. Without this checkan array of out bounds access will be made in compenabled arra...

CVE-2022-49227 igc: avoid kernel warning when changing RX ring parameters

In the Linux kernel, the following vulnerability has been resolved: igc: avoid kernel warning when changing RX ring parameters Calling ethtool changing the RX ring parameters like this: $ ethtool -G eth0 rx 1024 on igc triggers kernel warnings like this: 225.198467 ------------ cut here...

CVE-2022-49217 scsi: pm8001: Fix abort all task initialization

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix abort all task initialization In pm80xxsendabortall, the nelem field of the ccb used is not initialized to 0. This missing initialization sometimes lead to the task completion path seeing the ccb with a non-zero...

CVE-2022-49212 mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: atmel: fix refcount issue in atmelnandcontrollerinit The reference counting issue happens in several error handling paths on a refcounted object "nc-dmac". In these paths, the function simply returns the error code,...

CVE-2022-49201

CVE-2022-49201 concerns the Linux kernel, specifically the ibmvnic driver race between reset and xmit paths. The provided data describes a vulnerability where ibmvnic_xmit() may access tx_scrq after it has been freed in the reset path, caused by a race with in-flight ibmvnic_complete_tx() and a r...