CVE-2022-49796 tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit()

In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on tracearray in kprobeeventgentestexit When testgenkprobecmd failed after kprobeeventgencmdend, it will goto delete, which will call kprobeeventdelete and release the corresponding...

CVE-2022-49797

CVE-2022-49797 concerns the Linux kernel tracing subsystem. The vulnerability is a potential NULL pointer dereference in the kprobe path: when trace_get_event_file() fails, gen_kretprobe_test may be marked as the error code, and if the kprobe_event_gen_test module is removed, a dereference can oc...

CVE-2022-49794

CVE-2022-49794 affects the Linux kernel IIO ADC driver (iio: adc: at91_adc). The issue is a potential memory leak in at91_adc_allocate_trigger where, if iio_trigger_register() returns an error, the driver should free the trigger reference via iio_trigger_free() and then release memory with iio_tr...

CVE-2022-49794 iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91adc: fix possible memory leak in at91adcallocatetrigger If iiotriggerregister returns error, it should call iiotriggerfree to give up the reference that hold in iiotriggeralloc, so that it can call iiotrigrelease to...

CVE-2022-49795

The CVE-2022-49795 entry pertains to the Linux kernel: in rethook_alloc(), the local variable rh could be leaked if handler is NULL, causing a potential memory leak. The issue is described as a memleak in rethook_alloc(), which is resolved by the fix. Connected documents (e.g., SUSE OSV entries a...

CVE-2022-49793

CVE-2022-49793 is tied to Linux kernel code fixing a memory leak in iio_sysfs_trig_init within iio: trigger: sysfs. The issue arises from dev_set_name() allocating memory for the trigger name and not freeing it if device_add() fails; the fix ensures the allocated memory is released by freeing the...

CVE-2022-49792 iio: adc: mp2629: fix potential array out of bound access

In the Linux kernel, the following vulnerability has been resolved: iio: adc: mp2629: fix potential array out of bound access Add sentinel at end of maps to avoid potential array out of bound access in iio core...

CVE-2022-49791 io_uring: fix multishot accept request leaks

In the Linux kernel, the following vulnerability has been resolved: iouring: fix multishot accept request leaks Having REQFPOLLED set doesn't guarantee that the request is executed as a multishot from the polling path. Fortunately for us, if the code thinks it's multishot issue when it's not, it...

CVE-2022-49790 Input: iforce - invert valid length check when fetching device IDs

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting uninitialized value at iforceinitdevice 1, for commit 6ac0aec6b0a6 "Input: iforce - allow callers supply data buffer when fetching device IDs"...

CVE-2022-49789

The CVE-2022-49789 entry documents a Linux kernel issue in the SCSI zfcp path: double free of an FSF request due to caching the FSF request ID in a signed 32-bit int, causing truncation and sign-extension when converting to 64-bit, leading to mismatches in the internal hash table and a stale poin...

CVE-2022-49787

Summary (CVE-2022-49787): In the Linux kernel, the mmc: sdhci-pci fix prevents a memory leak by ensuring proper PCI device reference counting. The root cause is that pci_get_device() increases the pci_dev reference count and may not be balanced with pci_dev_put() before amd_probe() returns; the f...

CVE-2022-49787 mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pcidevput pcigetdevice will increase the reference count for the returned pcidev. We need to use pcidevput to decrease the reference count before amdprobe returns. There ...

CVE-2022-49785

The CVE-2022-49785 entry concerns the Linux kernel SGX subsystem. The issue arises in sgx_validate_offset_length(), which verifies userspace-provided offset and length but lacked an overflow check on their addition. The documented fix adds an overflow check to prevent arithmetic overflow when com...

CVE-2022-49785

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add overflow check in sgxvalidateoffsetlength sgxvalidateoffsetlength function verifies "offset" and "length" arguments provided by userspace, but was missing an overflow check on their addition. Add it...

CVE-2022-49784

CVE-2022-49784 affects the Linux kernel perf/x86/amd/uncore subsystem. The issue is a memory leak where the events array in per-CPU NB/LLC uncore contexts is freed late, after the uncore context is freed when a CPU comes online. The documented fix is to free the events array before freeing the un...

CVE-2022-49783

CVE-2022-49783 — In the Linux kernel, the issue arises when fpu_inherit_perms() is invoked under fpregs_lock() in PREEMPT_RT builds, causing a sleeping function to be called from an atomic context due to spin_lock_irq() usage. The root cause is that fpu_state_size_dynamic() can return true even t...

CVE-2022-49784 perf/x86/amd/uncore: Fix memory leak for events array

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/uncore: Fix memory leak for events array When a CPU comes online, the per-CPU NB and LLC uncore contexts are freed but not the events array within the context structure. This causes a memory leak as identified by the...

CVE-2022-49782 perf: Improve missing SIGTRAP checking

In the Linux kernel, the following vulnerability has been resolved: perf: Improve missing SIGTRAP checking To catch missing SIGTRAP we employ a WARN in perfeventoverflow, which fires if pendingsigtrap was already set: returning to user space without consuming pendingsigtrap, and then having the...

CVE-2022-49781 perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Fix crash due to race between amdpmuenableall, perf NMI and throttling amdpmuenableall does: if !testbitidx, cpuc-activemask continue; amdpmuenableeventcpuc-eventsidx; A perf NMI of another event can come between...

CVE-2022-49781

CVE-2022-49781 corresponds to a Linux kernel vulnerability in perf/x86/amd where a race between amd_pmu_enable_all and perf NMI/throttling could lead to a NULL event dereference and kernel crash. The issue arises when perf NMI disables/enables all events while amd_pmu_enable_all is in progress, p...