EUVD-2022-54548

Malicious code in bioql PyPI...

CVE-2022-49793: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit devsetname allocates memory for name, it need be freed when deviceadd fails, call putdevice to give up the reference that hold in deviceinitialize, so that it can ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a device name memory leak in the iio trigger sysfs, which could lead to a memory leak...

CVE-2022-49685

The Linux kernel is affected by a use-after-free vulnerability within the iio: trigger: sysfs component. The root cause is the failure to ensure that irq_work has completed before the trigger is freed during a remove operation. This issue was identified via KASAN reports showing a read of size 8 ...

CVE-2022-49685: Use After Free

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix use-after-free on remove Ensure that the irqwork has completed before the trigger is freed. ================================================================== BUG: KASAN: use-after-free in irqworkrunlist...