5216 matches found
CVE-2022-50324
CVE-2022-50324 — The Linux kernel contains a fix in the mtd: maps: pxa2xx-flash subsystem to address a memory leak during probe/remapping. The issue is triggered during probe when remapping an area and could leak memory if not handled properly; the fix frees the ‘info’ structure upon remapping er...
CVE-2022-50322 rtc: msc313: Fix function prototype mismatch in msc313_rtc_probe()
In the Linux kernel, the following vulnerability has been resolved: rtc: msc313: Fix function prototype mismatch in msc313rtcprobe With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to make sure the...
CVE-2022-50317
CVE-2022-50317 affects the Linux kernel, specifically the DRM bridge driver for Megachips (stdp2690 and stdp4028). The issue is a null-pointer dereference that occurs when removing the module because the two bridges are not probed concurrently, causing ge_b850v3_register() not to be called for in...
CVE-2022-50317 drm/bridge: megachips: Fix a null pointer dereference bug
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: megachips: Fix a null pointer dereference bug When removing the module we will get the following warning: 31.911505 i2c-core: driver stdp2690-ge-b850v3-fw unregistered 31.912484 general protection fault, probably for...
CVE-2023-53255 firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()
In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: Fix a potential resource leak in svccreatememorypool svccreatememorypool is only called from stratix10svcdrvprobe. Most of resources in the probe are managed, but not this memremap call. There is also no...
CVE-2023-53255
CVE-2023-53255 : Linux kernel vulnerability in firmware: stratix10-svc caused a potential resource leak in svc_create_memory_pool (invoked from stratix10_svc_drv_probe). The memremap() call was not paired with memunmap(), risking leakage. The fix switches to devm_memremap() to ensure proper resou...
CVE-2023-53249 clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe
In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mn: fix memory leak in imx8mnclocksprobe Use devmofiomap instead of ofiomap to automatically handle the unused ioremap region. If any error occurs, regions allocated by kzalloc will leak, but using devmkzalloc...
CVE-2022-50312 drivers: serial: jsm: fix some leaks in probe
In the Linux kernel, the following vulnerability has been resolved: drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just returning directly...
CVE-2022-50312 drivers: serial: jsm: fix some leaks in probe
In the Linux kernel, the following vulnerability has been resolved: drivers: serial: jsm: fix some leaks in probe This error path needs to unwind instead of just returning directly...
CVE-2022-50298
CVE-2022-50298 refers to a Linux kernel issue in the slimbus: qcom-ngd driver where probe error handling failed to clean up resources, leading to a warning path and potential resource leakage. The fix adds proper cleanup in probe() to unwind resources acquired during probe, as documented in the i...
CVE-2022-50298 slimbus: qcom-ngd: cleanup in probe error path
In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd: cleanup in probe error path Add proper error path in probe to cleanup resources previously acquired/allocated to fix warnings visible during probe deferral: notifier callback qcomslimngdssrnotify already...
CVE-2022-50298 slimbus: qcom-ngd: cleanup in probe error path
In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd: cleanup in probe error path Add proper error path in probe to cleanup resources previously acquired/allocated to fix warnings visible during probe deferral: notifier callback qcomslimngdssrnotify already...
CVE-2023-53242 thermal/drivers/hisi: Drop second sensor hi3660
In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 "driver core: Add allocsize hint to devm allocators" exposes a panic "BRK handler: Fatal exception" on the hi3660thermalprobe funciton. This is because the...
CVE-2023-53238 phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
In the Linux kernel, the following vulnerability has been resolved: phy: hisilicon: Fix an out of bounds check in hisiinnophyprobe The size of array 'priv-ports' is INNOPHYPORTNUM. In the for loop, 'i' is used as the index for array 'priv-ports' with a check i INNOPHYPORTNUM which indicates that...
CVE-2023-53238 phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
In the Linux kernel, the following vulnerability has been resolved: phy: hisilicon: Fix an out of bounds check in hisiinnophyprobe The size of array 'priv-ports' is INNOPHYPORTNUM. In the for loop, 'i' is used as the index for array 'priv-ports' with a check i INNOPHYPORTNUM which indicates that...
CVE-2023-53212
The connected PT-2025-37750 entry indicates a Linux kernel vulnerability involving xenbus. It states that the issue was resolved by the fix: “xenbus: check xen domain in xenbus probe initcall,” aligning with a prior Xen domain validation in the init path. Affected software likely includes the Lin...
CVE-2022-50266 kprobes: Fix check for probe enabled in kill_kprobe()
In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix check for probe enabled in killkprobe In killkprobe, the check whether disarmkprobeftrace needs to be called always fails. This is because before that we set the KPROBEFLAGGONE flag for kprobe so that...
CVE-2022-50266
The CVE-2022-50266 issue is in the Linux kernel kprobes path: kill_kprobe() incorrectly disarms a probe because KPROBE_FLAG_GONE is set before checking the probe’s enabled state, causing !kprobe_disabled(p) to evaluate to false and bypass necessary disarm handling. The fix adds the enabled-check ...
CVE-2023-53196
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix potential memory leak Function dwc3qcomprobe allocates memory for resource structure which is pointed by parentres pointer. This memory is not freed. This leads to memory leak. Use stack memory to prevent...