6626 matches found
CVE-2023-53810 blk-mq: release crypto keyslot before reporting I/O complete
In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...
CVE-2022-50647
CVE-2022-50647 relates to a Linux kernel issue on RISC‑V where port I/O string accessors (insb/outsb, etc.) used the physical PCI port I/O address instead of memory mapping, breaking parport/PCIe parallel-port accesses and causing kernel faults (memory access fault: Unable to handle kernel access...
CVE-2022-50647 RISC-V: Make port I/O string accessors actually work
In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O string accessors such as insb', outsb', etc. which use the physical PCI port I/O address rather than the corresponding memory mapping to get at the requested...
CVE-2022-50647
In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O string accessors such as insb', outsb', etc. which use the physical PCI port I/O address rather than the corresponding memory mapping to get at the requested...
CVE-2022-50639 io-wq: Fix memory leak in worker creation
In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fails, then the memory allocated for the 'iowqe' struct of the current node doesn't get freed on the error handling path, since it has not yet been...
CVE-2022-50639
CVE-2022-50639 describes a Linux kernel issue where, during io-wq worker creation, a CPU mask allocation failure could leak memory from the io_wqe structure if not yet added to the wqes array. The available connected sources (Astra Linux, EUVD, OSV, NVD/NIST, etc.) report that this vulnerability ...
CVE-2022-50639
In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fails, then the memory allocated for the 'iowqe' struct of the current node doesn't get freed on the error handling path, since it has not yet been...
RHEL 10 : kernel (RHSA-2025:22854)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22854 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: Fix oops due to...
PT-2025-49698
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the vmw mksstat add ioctl function within the drm/vmwgfx module. This occurs when copying a description string from user space fails, preventing the instance...
Linux Distros Unpatched Vulnerability : CVE-2023-53860
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: don't attempt to queue IO under RCU protection dm looks up the table for IO based on the request type, with an assumption that if the request is marked...
PT-2025-49620
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's mmc core component related to handling non-standard SDIO cards. Specifically, the issue arises from an incorrect reference counter management when a...
UBUNTU-CVE-2022-50615
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in snruncoremmiomap pcigetdevice will increase the reference count for the returned pcidev, so snruncoregetmcdev will return a pcidev with its reference count increased. We need to...
CVE-2022-50615
CVE-2022-50615 affects the Linux kernel’s perf/x86/intel/uncore code. The root cause is a reference-count leak in snr_uncore_mmio_map() where pci_get_device() increases the pci_dev reference count and snr_uncore_get_mc_dev() returns a pci_dev with an extra reference. The fix is to call pci_dev_pu...
CVE-2025-40291 io_uring: fix regbuf vector size truncation
In the Linux kernel, the following vulnerability has been resolved: iouring: fix regbuf vector size truncation There is a report of ioestimatebvecsize truncating the calculated number of segments that leads to corruption issues. Check it doesn't overflow "int"s used later. Rough but simple, can b...
CVE-2025-40291
In the Linux kernel, the following vulnerability has been resolved: iouring: fix regbuf vector size truncation There is a report of ioestimatebvecsize truncating the calculated number of segments that leads to corruption issues. Check it doesn't overflow "int"s used later. Rough but simple, can b...
ALSA-2025:22854 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: Fix oops due to uninitialised variable CVE-2025-38737 kernel: can: j1939: implement NETDEVUNREGISTER notification handler CVE-2025-39925 kernel: Bluetooth: hcievent: Fix UAF in...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ioestimatebvecsize truncating the number of computed segments, which could lead to data corruption...
UBUNTU-CVE-2025-40288
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices Previously, APU platforms and other scenarios with uninitialized VRAM managers triggered a NULL pointer dereference in ttmresourcemanagerusage. The root cause...
SUSE CVE-2025-40220
In the Linux kernel, the following vulnerability has been resolved: fuse: fix livelock in synchronous file put from fuseblk workers I observed a hang when running generic/323 against a fuseblk server. This test opens a file, initiates a lot of AIO writes to that file descriptor, and closes the fi...
