6956 matches found
CVE-2022-50880 wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: add peer map clean up for peer delete in ath10kstastate When peer delete failed in a disconnect operation, use-after-free detected by KFENCE in below log. It is because for each vdevid and address, it has only one...
CVE-2022-50880
Mode C CVE-2022-50880 affects the Linux kernel wifi driver ath10k. The issue arises from a use-after-free in ath10k_sta_state() when deleting peers: for a given vdev_id/address, multiple HTT_T2H peer_map entries could map to the same ath10k_peer, causing the first peer to be freed while a second ...
CVE-2022-50880 wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: add peer map clean up for peer delete in ath10kstastate When peer delete failed in a disconnect operation, use-after-free detected by KFENCE in below log. It is because for each vdevid and address, it has only one...
CVE-2023-54222 hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id()
In the Linux kernel, the following vulnerability has been resolved: hte: tegra-194: Fix off by one in tegrahtemaptolineid The "mapsz" is the number of elements in the "m" array so the comparison needs to be changed to = to prevent an out of bounds read...
CVE-2023-54222
CVE-2023-54222 affects the Linux kernel: a bug in the Tegra hte map driver (hte: tegra-194: tegra_hte_map_to_line_id) allowed an out-of-bounds read due to an off-by-one in the size check. The root cause is that the code compared against the size of the m array with a ‘>’ and needed a ‘>=’ i...
CVE-2023-54222 hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id()
In the Linux kernel, the following vulnerability has been resolved: hte: tegra-194: Fix off by one in tegrahtemaptolineid The "mapsz" is the number of elements in the "m" array so the comparison needs to be changed to = to prevent an out of bounds read...
CVE-2023-54165
In the Linux kernel, the following vulnerability has been resolved: zsmalloc: move LRU update from zsmapobject to zsmalloc Under memory pressure, we sometimes observe the following crash: 5694.832838 ------------ cut here ------------ 5694.842093 listdel corruption, ffff888014b6a448-next is...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992635)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992635 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix null pointer dereferencing in pinctrldttomap Here is the BUG report by...
PT-2025-54051
In the Linux kernel, the following vulnerability has been resolved: hte: tegra-194: Fix off by one in tegra hte map to line id The "map sz" is the number of elements in the "m" array so the comparison needs to be changed to = to prevent an out of bounds read...
PT-2025-53994
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-0 fbk3 rc3 hoangnhatpzsdynshrv41 10870 g85a9558a25de Description The Linux kernel contains an issue within the zsmalloc subsystem related to the timing of Least Recently Used LRU list updates. The LRU upda...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992606)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992606 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix race in sockmapfree sockmapfree calls releasesocksk without owning a reference ...
PT-2025-54116
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ath10k driver related to peer map management during peer deletion. Specifically, when a peer delete operation fails, a use-after-free conditio...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992457)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992457 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix NULL pointer derefernce in hnsrocemapmrsg ibmapmrsg allows ULPs to specify NULL as...
CVE-2025-15124 JeecgBoot list getParameterMap improper authorization
A vulnerability was identified in JeecgBoot up to 3.9.0. This impacts the function getParameterMap of the file /sys/sysDepartPermission/list. The manipulation of the argument departId leads to improper authorization. The attack can be initiated remotely. The attack's complexity is rated as high...
Linux Distros Unpatched Vulnerability : CVE-2025-68355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix exclusive map memory leak When exclproghash is 0 and exclproghashsize is non-zero, the map also needs to be freed. Otherwise, the map memory will not b...
Linux Distros Unpatched Vulnerability : CVE-2022-50770
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix memory leak in ocfs2mountvolume There is a memory leak reported by kmemleak: unreferenced object 0xffff88810cc65e60 size 32: comm mount.ocfs2, pid...
CVE-2023-54033
In the Linux kernel, the following vulnerability has been resolved: bpf: fix a memory leak in the LRU and LRUPERCPU hash maps The LRU and LRUPERCPU maps allocate a new element on update before locking the target hash table bucket. Right after that the maps try to lock the bucket. If this fails,...
SUSE CVE-2022-50770
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix memory leak in ocfs2mountvolume There is a memory leak reported by kmemleak: unreferenced object 0xffff88810cc65e60 size 32: comm "mount.ocfs2", pid 23753, jiffies 4302528942 age 34735.105s hex dump first 32 bytes: 10 ...
SUSE CVE-2023-54033
In the Linux kernel, the following vulnerability has been resolved: bpf: fix a memory leak in the LRU and LRUPERCPU hash maps The LRU and LRUPERCPU maps allocate a new element on update before locking the target hash table bucket. Right after that the maps try to lock the bucket. If this fails,...
SUSE CVE-2023-54121
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect splitting in btrfsdropextentmaprange In production we were seeing a variety of WARNON's in the extentmap code, specifically in btrfsdropextentmaprange when we have to call addextentmapping for our second spli...