CVE-2023-54126

CVE-2023-54126 : Linux kernel crypto_safexcel vulnerability where a failed safexcel driver load leaves IRQ affinity/workqueues uncleared, causing a boot-time warning. The fix cleans up the IRQ affinity and workqueues on load failure, per the vulnerability description and vendor advisories. Connec...

CVE-2023-54118 serial: sc16is7xx: setup GPIO controller later in probe

In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: setup GPIO controller later in probe The GPIO controller component of the sc16is7xx driver is setup too early, which can result in a race condition where another device tries to utilise the GPIO lines before th...

CVE-2023-54118

CVE-2023-54118 affects the Linux kernel driver sc16is7xx: the GPIO controller for the serial driver is initialized too early in probe, creating a race where another device could access GPIO lines before initialization completes, leading to an Oops on access (example trace shown). The issue is fix...

CVE-2023-54109 media: rcar_fdp1: Fix refcount leak in probe and remove function

In the Linux kernel, the following vulnerability has been resolved: media: rcarfdp1: Fix refcount leak in probe and remove function rcarfcpget take reference, which should be balanced with rcarfcpput. Add missing rcarfcpput in fdp1remove and the error paths of fdp1probe to fix this. hverkuil:...

CVE-2023-54109

CVE-2023-54109 affects the Linux kernel in media: rcar_fdp1. The vulnerability was due to a refcount leak: rcar_fcp_get() references were not balanced with rcar_fcp_put() in fdp1_probe error paths and in fdp1_remove. The fix adds the missing rcar_fcp_put() calls to balance references, addressing ...

CVE-2023-54109 media: rcar_fdp1: Fix refcount leak in probe and remove function

In the Linux kernel, the following vulnerability has been resolved: media: rcarfdp1: Fix refcount leak in probe and remove function rcarfcpget take reference, which should be balanced with rcarfcpput. Add missing rcarfcpput in fdp1remove and the error paths of fdp1probe to fix this. hverkuil:...

CVE-2023-54096 soundwire: fix enumeration completion

In the Linux kernel, the following vulnerability has been resolved: soundwire: fix enumeration completion The soundwire subsystem uses two completion structures that allow drivers to wait for soundwire device to become enumerated on the bus and initialised by their drivers, respectively. The code...

CVE-2023-54096

CVE-2023-54096 affects the Linux kernel soundwire subsystem. The vulnerability arises from the completion signaling used for enumeration/init: two completion structures were not signaled for current and future waiters and the wrong reinitialization function was used, risking memory corruption if ...

CVE-2023-54096 soundwire: fix enumeration completion

In the Linux kernel, the following vulnerability has been resolved: soundwire: fix enumeration completion The soundwire subsystem uses two completion structures that allow drivers to wait for soundwire device to become enumerated on the bus and initialised by their drivers, respectively. The code...

CVE-2023-54078 media: max9286: Free control handler

In the Linux kernel, the following vulnerability has been resolved: media: max9286: Free control handler The control handler is leaked in some probe-time error paths, as well as in the remove path. Fix it...

CVE-2023-54078

CVE-2023-54078 affects the Linux kernel in the media: max9286 driver, where the control handler is leaked in certain probe-time error paths and in the remove path. The vulnerability stems from improper freeing of the control handler, and the description indicates that this was resolved by applyin...

CVE-2023-54078 media: max9286: Free control handler

In the Linux kernel, the following vulnerability has been resolved: media: max9286: Free control handler The control handler is leaked in some probe-time error paths, as well as in the remove path. Fix it...

CVE-2022-50777

CVE-2022-50777 is a Linux kernel vulnerability in net: phy: xgmiitorgmii. The root cause: xgmiitorgmii_probe leaked a reference count because of_phy_find_device() returned a device node with an incremented refcount. The fix releases the reference by calling put_device() when the device is no long...

CVE-2022-50777 net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe

In the Linux kernel, the following vulnerability has been resolved: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmiiprobe ofphyfinddevice return device node with refcount incremented. Call putdevice to relese it when not needed anymore...

CVE-2022-50773 ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: fix possible null-ptr-defer in sndmts64interrupt I got a null-ptr-defer error report when I do the following tests on the qemu platform: make defconfig and CONFIGPARPORT=m, CONFIGPARPORTPC=m, CONFIGSNDMTS64=m Then...

CVE-2022-50745

CVE-2022-50745 affects the Linux kernel staging: media: tegra-video stack. The root cause is use-after-free of a device tree node saved in chan->of_node during tegra CSI channel probing; after initialization the stored node’s refcount can drop to 0 and the node may disappear, risking use-after...

CVE-2023-54053 wifi: iwlwifi: pcie: fix possible NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix possible NULL pointer dereference It is possible that iwlpciprobe will fail and free the trans, then afterwards iwlpciremove will be called and crash by trying to access trans which is already freed, fix...

CVE-2023-54053

CVE-2023-54053 is a Linux kernel issue affecting the iwlwifi PCIe path, causing a NULL pointer dereference during device removal after a failed iwl_pci_probe(). The vulnerability is described in connected vendor advisories as a fix for a crash when removing a device while its transmission structu...

CVE-2023-54053 wifi: iwlwifi: pcie: fix possible NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix possible NULL pointer dereference It is possible that iwlpciprobe will fail and free the trans, then afterwards iwlpciremove will be called and crash by trying to access trans which is already freed, fix...

CVE-2022-50725 media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init()

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix use-after-free in vidtvbridgedvbinit KASAN reports a use-after-free: BUG: KASAN: use-after-free in dvbdmxdevrelease+0x4d5/0x5d0 dvbcore Call Trace: ... dvbdmxdevrelease+0x4d5/0x5d0 dvbcore...