CVE-2023-54322

CVE-2023-54322 (Linux kernel, arm64) : The vulnerability arises in stack trace filtering where filter_irq_stacks() is supposed to drop irq-entry related frames, but on arm64 the irq entry point (gic_handle_irq) is not present when CONFIG_FUNCTION_GRAPH_TRACER is not enabled. This can cause uninte...

CVE-2022-50886 mmc: toshsd: fix return value check of mmc_add_host()

In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not added...

CVE-2023-54287

Summary of CVE-2023-54287 (Linux kernel, i.MX8MP) : The issue arises in the serial/tty imx driver when Jailhouse is enabled, potentially causing a kernel panic due to a NULL pointer dereference from a pending USR interrupt while the IRQ is not yet requested. The root cause is unsafe handling of t...

CVE-2023-54288

The CVE-2023-54288 entry pertains to the Linux kernel’s wifi mac80211 stack. A deadlock risk arises in ieee80211_tx_dequeue() due to a race between spin_lock and spin_unlock around queue_stop_reason_lock when an asynchronous interrupt occurs, potentially re-locking the same spinlock. This can lea...

CVE-2023-54288 wifi: mac80211: fortify the spinlock against deadlock by interrupt

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fortify the spinlock against deadlock by interrupt In the function ieee80211txdequeue there is a particular locking sequence: begin: spinlock&local-queuestopreasonlock; qstopped = local-queuestopreasonsq;...

CVE-2023-54288

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fortify the spinlock against deadlock by interrupt In the function ieee80211txdequeue there is a particular locking sequence: begin: spinlock&local-queuestopreasonlock; qstopped = local-queuestopreasonsq;...

CVE-2022-50882 media: uvcvideo: Fix memory leak in uvc_gpio_parse

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvcgpioparse Previously the unit buffer was allocated before checking the IRQ for privacy GPIO. In case of error, the unit buffer was leaked. Allocate the unit buffer after the IRQ to avoid it...

CVE-2022-50882 media: uvcvideo: Fix memory leak in uvc_gpio_parse

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvcgpioparse Previously the unit buffer was allocated before checking the IRQ for privacy GPIO. In case of error, the unit buffer was leaked. Allocate the unit buffer after the IRQ to avoid it...

CVE-2023-54205 pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain

In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: Fix refcount leak in stm32pctrlgetirqdomain ofirqfindparent returns a node pointer with refcount incremented, We should use ofnodeput on it when not needed anymore. Add missing ofnodeput to avoid refcount leak...

CVE-2023-54205

In the Linux kernel, the following vulnerability has been resolved: pinctrl: stm32: Fix refcount leak in stm32pctrlgetirqdomain ofirqfindparent returns a node pointer with refcount incremented, We should use ofnodeput on it when not needed anymore. Add missing ofnodeput to avoid refcount leak...

CVE-2022-50836 remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()

In the Linux kernel, the following vulnerability has been resolved: remoteproc: sysmon: fix memory leak in qcomaddsysmonsubdev The kfree should be called when ofirqgetbyname fails or devmrequestthreadedirq fails in qcomaddsysmonsubdev, otherwise there will be a memory leak, so add kfree to fix it...

CVE-2022-50836

The CVE-2022-50836 issue in the Linux kernel’s remoteproc: sysmon subsystem (qcom_add_sysmon_subdev) caused a memory leak. Root cause: kfree() was not invoked when of_irq_get_byname() or devm_request_threaded_irq() failed, leading to leaked memory. The fix adds a kfree() path to ensure proper cle...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of a pending USR interrupt before requesting an irq, which could lead to a null pointer...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an interrupt not being released before device removal, which could result in a null pointer dereference...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an interrupt entry point that is not properly set, which could result in a stack depth exception...

CVE-2023-54287: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: serial: imx: disable Ageing Timer interrupt request irq There maybe pending USR interrupt before requesting irq, however uartaddoneport has not executed, so there will be kernel panic: 0.795668 Unable to handle kernel NULL...

CVE-2022-50847: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize AUX channel in it6505i2cprobe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channe...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992279 advisory. In the Linux kernel, the following vulnerability has been resolved: intelth: Fix a resource leak in an error handling path If an error occurs after calling...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992348)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992348 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 Don't BUG/WARN on interrupt...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992472)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992472 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Optimize clearing the pending PMI and remove WARNON for PMI check in powerpmudisab...