CVE-2023-54261 drm/amdkfd: Add missing gfx11 MQD manager callbacks

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add missing gfx11 MQD manager callbacks mqdstride function was introduced in commit 2f77b9a242a2 "drm/amdkfd: Update MQD management on multi XCC setup" but not assigned for gfx11. Fixes a NULL dereference in debugfs...

CVE-2023-54261 drm/amdkfd: Add missing gfx11 MQD manager callbacks

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add missing gfx11 MQD manager callbacks mqdstride function was introduced in commit 2f77b9a242a2 "drm/amdkfd: Update MQD management on multi XCC setup" but not assigned for gfx11. Fixes a NULL dereference in debugfs...

CVE-2023-54233

The CVE-2023-54233 issue affects the Linux kernel ASoC/SOF path, where IPC4 topologies containing an unsupported widget could leave the .module_info field unset, leading to a NULL dereference in sof_ipc4_route_setup() and a kernel Oops. A fix adds a guard to handle such cases. Connected sources c...

CVE-2023-54233 ASoC: SOF: avoid a NULL dereference with unsupported widgets

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .moduleinfo field won't be set, then sofipc4routesetup will cause a kernel Oops trying to dereference it. Add a...

CVE-2023-54233

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .moduleinfo field won't be set, then sofipc4routesetup will cause a kernel Oops trying to dereference it. Add a...

CVE-2022-50846 mmc: via-sdmmc: fix return value check of mmc_add_host()

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehos...

CVE-2022-50842 drm/virtio: Check whether transferred 2D BO is shmem

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Check whether transferred 2D BO is shmem Transferred 2D BO always must be a shmem BO. Add check for that to prevent NULL dereference if userspace passes a VRAM BO...

CVE-2022-50842

CVE-2022-50842 affects the Linux kernel DRM virtio path. The issue arises when transferring 2D buffer objects (BOs); a non-shmem BO (e.g., VRAM) could bypass a necessary check, potentially leading to a NULL dereference. The publicly documented fix is to validate that a transferred 2D BO is always...

CVE-2022-50817 net: hsr: avoid possible NULL deref in skb_clone()

In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid possible NULL deref in skbclone syzbot got a crash 1 in skbclone, caused by a bug in hsrgetuntaggedframe. When/if createstrippedskbhsr returns NULL, we must not attempt to call skbclone. While we are at it, replac...

CVE-2022-50817

In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid possible NULL deref in skbclone syzbot got a crash 1 in skbclone, caused by a bug in hsrgetuntaggedframe. When/if createstrippedskbhsr returns NULL, we must not attempt to call skbclone. While we are at it, replac...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992434)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992434 advisory. In the Linux kernel, the following vulnerability has been resolved: virtio-gpu: fix a missing check to avoid NULL dereference 'cacheent' could be set NULL inside...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992353 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: sf-pdma: Add multithread support for a DMA channel When we get a DMA channel and try t...

Linux Distros Unpatched Vulnerability : CVE-2023-54233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .moduleinfo field won't be set, then...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992551 advisory. In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix error exit of privcmdioctldmop The error exit of privcmdioctldmop is calling...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992441)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992441 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfttproxy: restrict to prerouting hook TPROXY is only allowed from prerouting, but...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992375)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992375 advisory. In the Linux kernel, the following vulnerability has been resolved: skbuff: skbsegment, Call zero copy functions before using skbuff frags Commit bf5c25d60861 skbuff...

PT-2025-54115

In the Linux kernel, the following vulnerability has been resolved: objtool: Fix SEGFAULT find insn will return NULL in case of failure. Check insn in order to avoid a kernel Oops for NULL pointer dereference...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992216)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992216 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Add missing check for allocorderedworkqueue Add check for the return value of...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992695 advisory. In the Linux kernel, the following vulnerability has been resolved: cpufreq: scpi: Fix null-ptr-deref in scpicpufreqgetrate cpufreqcpugetraw can return NULL when the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked mmcaddhost return value, which could lead to a memory leak and null pointer dereference...