PT-2024-1944 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to errors in pointer dereferencing in functions such as create dir, kobject del, kobject cleanup, and kobj child ns ops in the Linux kernel's b/kobject.c library...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:4783-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4783-1 advisory. The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixe...

CLSA-2023-1701266210 Fix of 10 CVEs

CVE-2023-31085 // CVE-url: https://ubuntu.com/security/CVE-2023-31085 - ubi: Refuse attaching if mtd's erasesize is 0 Jammy update: v5.15.121 upstream stable release LP: 2032689 // CVE-url: https://ubuntu.com/security/CVE-2023-4132 - media: usb: siano: Fix warning due to null workfunct function...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.325.5.el8 - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext Krister Johansen Orabug: 35905508 - char: misc: Increase the maximum number of dynamic misc devices to 1048448 D Scott Phillips Orabug: 35905508 - perf/arm-cmn: Fix invalid pointer when access...

kernel: cpufreq: Init completion before kobject_init_and_add()

An initialization order bug was found in the Linux kernel's cpufreq subsystem during policy allocation. A local user can trigger this issue when CPU frequency policy initialization fails after kobject registration but before completion initialization, causing the cleanup path to attempt to use an...

kernel: cpufreq: Init completion before kobject_init_and_add()

An initialization order bug was found in the Linux kernel's cpufreq subsystem during policy allocation. A local user can trigger this issue when CPU frequency policy initialization fails after kobject registration but before completion initialization, causing the cleanup path to attempt to use an...

kernel: driver core: fix resource leak in device_add()

A reference leak was found in the Linux kernel's driver core device registration logic. When kobjectadd fails partway through deviceadd, the error cleanup attempts to free resources but fails because kobjectadd has already cleared the device's parent pointer. This prevents cleanupgluedir from...

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.

...

CVE-2023-45863

An out-of-bounds memory write flaw was found in the load/unload module in the Linux kernel's kobject functionality, potentially triggering a race condition in the kobjectgetpath function. This issue may allow a local user to crash the system or potentially escalate their privileges on the system...

SUSE CVE-2023-45863

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fillkobjpath out-of-bounds write...

CVE-2023-45863

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fillkobjpath out-of-bounds write...

AZL-31568 CVE-2023-45863 affecting package kernel for versions less than 5.15.135.1-2

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fillkobjpath out-of-bounds write...

UBUNTU-CVE-2023-45863

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fillkobjpath out-of-bounds write...

PT-2025-41075

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the Linux kernel’s platform/x86/dell-sysman component. When a duplicate attribute is found using the kset find obj function, a reference to that attribute is...

kernel: Linux kernel: Memory leak in vdpa_sim leading to denial of service

A flaw was found in the vdpasim component of the Linux kernel. This memory leak vulnerability occurs when a module is probed and the deviceregister function fails within vdpasimnetinit or vdpasimblkinit. In such a scenario, the reference count of the kobject is not properly decreased, leading to...

kernel: cpufreq: governor: Use kobject release() method to free dbs_data

A vulnerability was found in the Linux kernel's cpufreq subsystem. The dbsdata struct, which embeds a kobject, improperly attempts to free the struct using kfree rather than through the proper release method. This issue can lead to a use-after-free scenario, resulting in system instability, memor...

SUSE CVE-2019-20811

An issue was discovered in the Linux kernel before 5.0.6. In rxqueueaddkobject and netdevqueueaddkobject in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c...

SUSE CVE-2022-1974

A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAPNETADMIN privilege to leak kernel information...

PT-2025-40757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists within the driver core, specifically in the device add function. When kobject add fails during the device add process, the cleanup glue dir function is called to...

PT-2023-33566 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the initialization process in the cpufreq component, where the completion of initialization occurs before the kobject init and add function is called. This problem wa...