CVE-2026-23176

In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshibahaps: Fix memory leaks in add/remove routines toshibahapsadd leaks the haps object allocated by it if it returns an error after allocating that object successfully. toshibahapsremove does not free the object...

EUVD-2026-5501

In the Linux kernel, the following vulnerability has been resolved: virtionet: fix device mismatch in devmkzalloc/devmkfree Initial rsshdr allocation uses virtiodevice-device, but virtnetsetqueues frees using netdevice-device. This device mismatch causing below devres warning 3788.514041...

CVE-2026-23046 virtio_net: fix device mismatch in devm_kzalloc/devm_kfree

In the Linux kernel, the following vulnerability has been resolved: virtionet: fix device mismatch in devmkzalloc/devmkfree Initial rsshdr allocation uses virtiodevice-device, but virtnetsetqueues frees using netdevice-device. This device mismatch causing below devres warning 3788.514041...

PT-2026-43735

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the pcs add gpio func function. The of parse phandle with args function returns a device node pointer with an incremented reference count in gpiospec.np...

CVE-2023-54221 clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe

In the Linux kernel, the following vulnerability has been resolved: clk: imx93: fix memory leak and missing unwind goto in imx93clocksprobe In function probe, it returns directly without unregistered hws when error occurs. Fix this by adding 'goto unregisterhws;' on line 295 and line 310. Use...

SUSE CVE-2025-68170

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree devres managed rdev Since the allocation of the drivers main structure was changed to devmdrmdevalloc rdev is managed by devres and we shouldn't be calling kfree on it. This fixes things exploding if the...

UBUNTU-CVE-2025-68181

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drmputdev Since the allocation of the drivers main structure was changed to devmdrmdevalloc drmputdev'ing to trigger it to be free'd should be done by devres. However, drmputdev is still in the probe...

CVE-2025-40144

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990012 advisory. In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of private memory on probe failure On probe error the driver should free...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989218)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989218 advisory. In the Linux kernel, the following vulnerability has been resolved: spi: Fix use-after-free with devmspialloc We can't rely on the contents of the devres list during...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987140)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987140 advisory. In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of private memory on probe failure On probe error the driver should free...

PT-2025-40676

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/mediatek subsystem, specifically within the mtk drm crtc component. The devm kcalloc function may return NULL, and the code does not adequately...

EUVD-2023-59831

Malicious code in bioql PyPI...

PT-2025-37889

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the drm/msm/dpu subsystem where a failure of devm kzalloc could lead to a null pointer dereference in the dpu writeback init function. Specifically,...

PT-2025-37694

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue was resolved in the Linux kernel related to the nvidia-shield HID device. The vulnerability occurred because the input device name was freed during device...

PT-2025-37610

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where the return value of the devm kcalloc function is not checked. This can lead to a NULL pointer dereference if devm kcalloc returns NULL...

CVE-2022-49448 soc: bcm: Check for NULL return of devm_kzalloc()

In the Linux kernel, the following vulnerability has been resolved: soc: bcm: Check for NULL return of devmkzalloc As the potential failure of allocation, devmkzalloc may return NULL. Then the 'pd-pmb' and the follow lines of code may bring null pointer dereference. Therefore, it is better to che...

SUSE CVE-2024-53204

In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtkusb3phyprobe In rtkusb3phyprobe devmkzalloc may return NULL but this returned value is not checked...

SUSE CVE-2022-48907

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: lcd2s: Fix memory leak in -remove Once allocated the struct lcd2sdata is never freed. Fix the memory leak by switching to devmkzalloc...

CVE-2021-47314

In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of private memory on probe failure On probe error the driver should free the memory allocated for private structure. Fix this by using resource-managed allocation...