kernel: writeback: avoid use-after-free after removing device

In the Linux kernel, the following vulnerability has been resolved: writeback: avoid use-after-free after removing device When a disk is removed, bdiunregister gets called to stop further writeback and wait for associated delayed work to complete. However, wbinodewritebackend may schedule bandwid...

kernel: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq

In the Linux kernel, the following vulnerability has been resolved: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq Can not set the @sharedhcd to NULL before decrease the usage count by usbputhcd, this will cause the shared hcd not released...

kernel: io_uring/rw: defer fsnotify calls to task context

A locking context violation was found in the Linux kernel's iouring subsystem. The fsnotify calls were being made directly from kiocb completion context, which can execute in soft or hard IRQ context. This causes lockdep warnings when fsnotify attempts memory allocation with GFPKERNEL flags, whic...

kernel: drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix memory leak in hpdrxirqcreateworkqueue If construction of the array of work queues to handle hpdrxirq offload work fails, we need to unwind. Destroy all the created workqueues and the allocated memory for the...

kernel: regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode

In the Linux kernel, the following vulnerability has been resolved: regmap-irq: Use the new numconfigregs property in regmapaddirqchipfwnode Commit faa87ce9196d "regmap-irq: Introduce config registers for irq types" added the numconfigregs, then commit 9edd4f5aee84 "regmap-irq: Deprecate type...

PT-2023-9700

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a possible NULL pointer dereference in the axi fan control irq handler function, which is dependent on the private axi fan control data structure. This function...

CVE-2023-5563

The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIGCANAUTOBUSOFFRECOVERY=y. This results in calling ksleep in IRQ context, causing a fatal exception...

Code injection

The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIGCANAUTOBUSOFFRECOVERY=y. This results in calling ksleep in IRQ context, causing a fatal exception...

CVE-2023-5563

The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIGCANAUTOBUSOFFRECOVERY=y. This results in calling ksleep in IRQ context, causing a fatal exception...

CVE-2023-5563

CVE-2023-5563 affects Zephyr RTOS, specifically the SJA1000 CAN controller driver backend. When built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y, the driver attempts to recover from a bus-off event by calling k_sleep() in IRQ context, which leads to a fatal exception. The linked documents confirm th...

CVE-2023-5563: Improper Check or Handling of Exceptional Conditions

The SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIGCANAUTOBUSOFFRECOVERY=y. This results in calling ksleep in IRQ context, causing a fatal exception...

PT-2023-32178

Name of the Vulnerable Software and Affected Versions SJA1000 CAN controller driver backend affected versions not specified Description The issue arises when the SJA1000 CAN controller driver backend is built with CONFIG CAN AUTO BUS OFF RECOVERY=y, causing it to automatically attempt to recover...

PT-2024-14731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out of bounds access in the hci dma irq handler function. This occurs when looping over ring headers that are not allocated and enabled in hci dma init,...

Unbreakable Enterprise kernel security update

4.14.35-2047.529.3 - uek-rpm: Update kernel linux-firmware dependency to 20230516-999.26.git6c9e0ed5. Somasundaram Krishnasamy Orabug: 35724203 - LTS version: v4.14.322 Saeed Mirzamohammadi - drm/edid: fix objtool warning in drmcvtmodes Linus Torvalds - mtd: rawnand: omapelm: Fix incorrect type i...

PT-2025-54137

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc6+ Description The Linux kernel contains a flaw within the vduse module. Specifically, the vduse vdpa set vq affinity callback function may be invoked with a NULL value as the cpu mask when a vduse device...

PT-2025-37692

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the iwlwifi component, specifically in the iwlwifi: pcie: iwl pcie irq rx msix handler function. This issue involves a potential NULL pointer...

virt:kvm_utils2 security update

hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm 6.1.1-6-el8 - CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 Karl Heubaum Orabug: 35305727 CVE-2023-1544 - virtio-gpu: do not byteswap padding Paolo Bonzini...

kernel: PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains()

In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Fix refcount leak in mtkpcieinitirqdomains ofgetchildbyname returns a node pointer with refcount incremented, so we should use ofnodeput on it when we don't need it anymore. Add missing ofnodeput to avoid...

PT-2025-26154

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc3+ Description A vulnerability in the Linux kernel has been resolved, specifically in the KVM: SVM component. The issue occurs when userspace injects an interrupt with GIF=0, which can cause the kernel t...

PT-2025-26080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the mtk pcie init irq domains function. The of get child by name function returns a node pointer with an...