CVE-2025-68751

CVE-2025-68751 concerns a false-positive KMSAN warning in the Linux kernel’s s390/fpu code (fpu_vstl). The inline assembly instruction vstl can write a variable number of bytes depending on runtime values; compile-time constraints cause the kmsan instrumentation to track only 1 byte, producing sp...

SUSE CVE-2022-50867

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix kvzalloc vs statekcalloc usage adrenoshowobject is a trap! It will re-allocate the pointer it is passed on first call, when the data is ascii85 encoded, using kvmalloc/ kvfree. Which means the data passed to it...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993037)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993037 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in testgensynthcmd and testemptysynthevent testgensynthcmd only free buf...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-992937)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992937 advisory. In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of casinitone cassaturnfirmwareinit allocat...

Unity Linux 20.1060a Security Update: kernel (UTSA-2025-992983)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992983 advisory. In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in createstaticcallsections strdup allocates memory for keyname. We need...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993304 advisory. In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb-len Packet length retrieved from skb data may be...

Unity Linux 20.1060a Security Update: kernel (UTSA-2025-993175)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993175 advisory. In the Linux kernel, the following vulnerability has been resolved: integrity: Fix memory leakage in keyring allocation error path Key restriction is allocated in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992913 advisory. In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in ofgetddrtimings We should add the ofnodeput when breaking ou...

Exploit for CVE-2025-40019

CVE-2025-40019-Essiv A PoC for CVE-2025-40019 in ESSIV module...

EUVD-2023-60393

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add check for kmemdup Since the kmemdup may return NULL pointer, it should be better to add check for the return value in order to avoid NULL pointer dereference...

EUVD-2023-60447

In the Linux kernel, the following vulnerability has been resolved: exfat: use kvmallocarray/kvfree instead of kmallocarray/kfree The call stack shown below is a scenario in the Linux 4.19 kernel. Allocating memory failed where exfat fs use kmallocarray due to system memory fragmentation, while t...

CVE-2023-54210

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciremoveadvmonitor KASAN reports that there's a use-after-free in hciremoveadvmonitor. Trawling through the disassembly, you can see that the complaint is from the access in...

CVE-2023-54201

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix wrong resources deallocation order When trying to destroy QP or CQ, we first decrease the refcount and potentially free memory regions allocated for the object and then request the device to destroy the object. If t...

UBUNTU-CVE-2023-54194

In the Linux kernel, the following vulnerability has been resolved: exfat: use kvmallocarray/kvfree instead of kmallocarray/kfree The call stack shown below is a scenario in the Linux 4.19 kernel. Allocating memory failed where exfat fs use kmallocarray due to system memory fragmentation, while t...

CVE-2022-50821

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...

CVE-2023-54283

In the Linux kernel, the following vulnerability has been resolved: bpf: Address KCSAN report on bpflrulist KCSAN reported a data-race when accessing node-ref. Although node-ref does not have to be accurate, take this chance to use a more common READONCE and WRITEONCE pattern instead of datarace...

CVE-2022-50875 of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()

In the Linux kernel, the following vulnerability has been resolved: of: overlay: fix null pointer dereferencing in finddupcsetnodeentry and finddupcsetprop When kmalloc fail to allocate memory in kasprintf, fn1 or fn2 will be NULL, and strcmp will cause null pointer dereference...

CVE-2023-54245

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds When we run syzkaller we get below Out of Bound. "KASAN: slab-out-of-bounds Read in regcacheflatread" Below is the backtrace of the issue: dumpbacktrace+0x0/0x4c8...

CVE-2022-50867

CVE-2022-50867 : In the Linux kernel, the drm/msm/a6xx path fixes improper kvzalloc usage vs state_kcalloc. The adreno_show_object() path reallocates the passed data on first call (ascii85-encoded) using kvmalloc/kvfree, so the data must be kvmalloc’d and state_kcalloc cannot be used. The change ...

CVE-2022-50863 wifi: rtw89: free unused skb to prevent memory leak

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: free unused skb to prevent memory leak This avoid potential memory leak under power saving mode...