CVE-2023-54241 MIPS: KVM: Fix NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: MIPS: KVM: Fix NULL pointer dereference After commit 45c7e8af4a5e3f0bea4ac209 "MIPS: Remove KVMTE support" we get a NULL pointer dereference when creating a KVM guest: 146.243409 Starting KVM with MIPS VZ extensions 149.849151 CP...

CVE-2023-54204

In the Linux kernel, the following vulnerability has been resolved: mmc: sunplus: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, 1. the memory allocated in mmcallochost will be leaked 2. null-ptr-deref will happen when calling mmcremovehost in...

CVE-2022-50847 drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize AUX channel in it6505i2cprobe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channe...

CVE-2022-50835 jbd2: add miss release buffer head in fc_do_one_pass()

In the Linux kernel, the following vulnerability has been resolved: jbd2: add miss release buffer head in fcdoonepass In fcdoonepass miss release buffer head after use which will lead to reference count leak...

CVE-2023-54202 drm/i915: fix race condition UAF in i915_perf_add_config_ioctl

In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race condition UAF in i915perfaddconfigioctl Userspace can guess the id value and try to race oaconfig object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking t...

CVE-2023-54190

In CVE-2023-54190, the Linux kernel fixes a refcount leak in leds-core: of_led_get() where class_find_device_by_of_node() previously took a reference via class_find_device() and relied on put_device() to drop it. The vulnerability pertains to the LED subsystem's reference counting and has been mi...

CVE-2023-54184 scsi: target: iscsit: Free cmds before session free

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsit: Free cmds before session free Commands from recovery entries are freed after session has been closed. That leads to use-after-free at command free or NPE with such call trace: Time2Retain timer expired for...

CVE-2023-54180

CVE-2023-54180 concerns the Linux kernel Btrfs repair flow when a dev-replace operation is in progress. The root cause is a BUG_ON() in btrfs_repair_io_failure() triggered while repairing a degraded/replace target device, due to mirror_num handling in btrfs_map_block() and possible manipulation o...

CVE-2023-54174 vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd

In the Linux kernel, the following vulnerability has been resolved: vfio: Fix NULL pointer dereference caused by uninitialized group-iommufd group-iommufd is not initialized for the iommufdctxput 20018.331541 BUG: kernel NULL pointer dereference, address: 0000000000000000 20018.377508 RIP:...

CVE-2022-50819

The CVE-2022-50819 vulnerability affects the Linux kernel’s udmabuf/dma-buf path. If the sg table creation fails, ubuf->sg must be set to NULL; otherwise, closing the dmabuf fd can trigger a use-after-free/null-deref in release_udmabuf, causing a crash. The issue was addressed by ensuring ubuf...

CVE-2022-50814 crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/zip - fix mismatch in get/set sglsgenr KASAN reported this Bug: 17619.659757 BUG: KASAN: global-out-of-bounds in paramgetint+0x34/0x60 17619.673193 Read of size 4 at addr fffff01332d7ed00 by task readall/1507958...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992515)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992515 advisory. In the Linux kernel, the following vulnerability has been resolved: recordmcount: Fix memory leaks in the uwrite function Common realloc mistake: 'fileappend' nulled...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992553 advisory. In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroyworkqueue call There is a possible race condition use-after-free...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992635 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix null pointer dereferencing in pinctrldttomap Here is the BUG report by...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992275)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992275 advisory. In the Linux kernel, the following vulnerability has been resolved: PNP: fix name memory leak in pnpallocdev After commit 1fa5ae857bb1 driver core: get rid of struct...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992486 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpiputtable to fix memory leak When the radeon driver reads the bios...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992599 advisory. In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswephaslimitsbox pcigetdevice will increase t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992318)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992318 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: fix oops in concurrently setting insnemulation sysctls emulationprochandler changes...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992236 advisory. In the Linux kernel, the following vulnerability has been resolved: brcmfmac: return error when getting invalid maxflowrings from dongle When firmware hit trap at...

Linux Distros Unpatched Vulnerability : CVE-2023-54306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: tls: avoid hanging tasks on the txlock syzbot sent a hung task report and Eric explains that adversarial receiver may keep RWIN at 0 for a long time, so we...