Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net/niu: Niu requires that the MSIX ENTRYDATA fields be touched before the entry data is read. The function niutrymsix has been fixed to not cause a fatal trap on sparc systems. The field PCIDEVFLAGSMSIXTOUCHENTRYDATAFIRST in...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: hwrng: amd – Fixed the PCI device reference count leak. foreachpcidev is implemented through pcigetdevice. The comment for pcigetdevice states that it will increase the reference count of the returned pcidev, and also decrease...

CVE-2026-68175 tracing: Fix resource leak on mmiotrace trace_pipe close

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix resource leak on mmiotrace tracepipe close The mmiotrace tracer was added May 12th 2008. At that time, resources created in pipeopen could not be freed because there was not pipeclose function pointer of the tracer...

CVE-2026-68175

The CVE-2026-68175 entry documents a fixed resource leak in the Linux kernel tracing subsystem (mmiotrace) related to trace_pipe close. Specifically, mmio_pipe_open() allocated a header_iter and took a pci_dev reference when trace_pipe opened; mmio_close() frees them but was not wired to the trac...

CVE-2026-43211 PCI: Fix pci_slot_trylock() error handling

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcislottrylock error handling Commit a4e772898f8b "PCI: Add missing bridge lock to pcibuslock" delegates the bridge device's pcidevtrylock to pcibustrylock in pcislottrylock, but it forgets to remove the corresponding...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013590)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013590 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix pci device refcount leak As comment of pcigetdomainbusandslot says, it returns a...

The vulnerability of the pci_dev_lock() function in the drivers/pci/pci.c module of the Linux operating system’s device support driver allows a hacker to cause a service failure.

The vulnerability of the pcidevlock function in the drivers/pci/pci.c module of the Linux operating system’s device support driver for PCI devices is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993310 advisory. In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling getfunction0 getfunction0 calls...

CVE-2022-50868 hwrng: amd - Fix PCI device refcount leak

In the Linux kernel, the following vulnerability has been resolved: hwrng: amd - Fix PCI device refcount leak foreachpcidev is implemented by pcigetdevice. The comment of pcigetdevice says that it will increase the reference count for the returned pcidev and also decrease the reference count for...

CVE-2022-50659 hwrng: geode - Fix PCI device refcount leak

In the Linux kernel, the following vulnerability has been resolved: hwrng: geode - Fix PCI device refcount leak foreachpcidev is implemented by pcigetdevice. The comment of pcigetdevice says that it will increase the reference count for the returned pcidev and also decrease the reference count fo...

DEBIAN-CVE-2022-50645

In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: fix refcount leak in pcigetdevwrapper As the comment of pcigetdomainbusandslot says, it returns a PCI device with refcount incremented, so it doesn't need to call an extra pcidevget in pcigetdevwrapper, and the PCI...

EUVD-2025-31964

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-50337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling getfunction0 getfunction0 calls...

CVE-2022-50318

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix reference count leak in hswephaslimitsbox pcigetdevice will increase the reference count for the returned 'dev'. We need to call pcidevput to decrease the reference count. Since 'dev' is only used in...

SUSE CVE-2022-49787

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fix possible memory leak caused by missing pcidevput pcigetdevice will increase the reference count for the returned pcidev. We need to use pcidevput to decrease the reference count before amdprobe returns. There ...

PT-2024-33727

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: A slab-out-of-bounds bug has been resolved in the Linux kernel. The issue occurs when attaching an SST PCI device to a VM, causing a "BUG: KASAN: slab-out-of-bounds" error. The bug is related...

DEBIAN-CVE-2022-48896

In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix pci device refcount leak As the comment of pcigetdomainbusandslot says, it returns a PCI device with refcount incremented, when finish using it, the caller must decrement the reference count by calling pcidevput. In...

PT-2022-36538 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: The issue is related to a possible memory leak caused by a missing pci dev put call. This problem was introduced in version v4.4 and is fixed in version v4.14.300. The actual impact and...

PT-2022-35963

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.10 Description The issue is related to a possible memory leak caused by a missing pci dev put call. This problem was introduced in version v4.4 and is fixed in Linux Kernel version v6.0.10. The actual impact...

PT-2025-18504

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the sdhci-pci component. The problem arises from a missing pci dev put call, which is necessary to decrease t...