kernel: serial: 8250_bcm7271: fix leak in `brcmuart_probe`

A resource leak flaw was found in the Broadcom BCM7271 serial driver. In the brcmuartprobe function, the baudmuxclk clock is prepared and enabled but not released in error paths, causing a clock resource leak when driver probe fails...

SUSE CVE-2024-50238

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenly also...

SUSE CVE-2024-50240

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data, but mistakenly also removed the initialisation...

DEBIAN-CVE-2024-50240

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data, but mistakenly also removed the initialisation...

DEBIAN-CVE-2024-50238

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenly also...

UBUNTU-CVE-2024-50240

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data, but mistakenly also removed the initialisation...

CVE-2024-50240 phy: qcom: qmp-usb: fix NULL-deref on runtime suspend

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data, but mistakenly also removed the initialisation...

CVE-2024-50238 phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend Commit 413db06c05e7 "phy: qcom-qmp-usb: clean up probe initialisation" removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenly also...

UBUNTU-CVE-2024-50189

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Switch to device-managed dmamalloccoherent Using the device-managed version allows to simplify clean-up in probe error path. Additionally, this device-managed ensures proper cleanup, which helps to resolve memory...

CVE-2024-50189 HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Switch to device-managed dmamalloccoherent Using the device-managed version allows to simplify clean-up in probe error path. Additionally, this device-managed ensures proper cleanup, which helps to resolve memory...

Linux kernel DMAengine DoS

The vulnerability of the dmaengine kernel components in the Linux operating system is related to errors in resource management in the fslqdmaprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

edma component Kernel DoS

The vulnerability of the edma component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the edmaprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

AZL-53793 CVE-2024-50166 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix refcount handling of fman-related devices In macprobe there are multiple calls to offinddevicebynode, fmanbind and fmanportbind which takes references to ofdev-dev. Not all references taken by these calls are releas...

AZL-53483 CVE-2024-50166 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix refcount handling of fman-related devices In macprobe there are multiple calls to offinddevicebynode, fmanbind and fmanportbind which takes references to ofdev-dev. Not all references taken by these calls are releas...

com.github.psi-probe:psi-probe-tomcat11 (5.0.0), com.github.waffle:waffle-tomcat11 (3.4.0) +3 more potentially affected by CVE-2024-38286 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m1, <=11.0.0-m20)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m20 Source cves: CVE-2024-38286 Source advisory: GHSA-7JQF-V358-P8G7...

cn.hackyo:vsphere-samples-nodeps (6.7.0), com.github.psi-probe:psi-probe-tomcat7 (>=3.2.0, <=3.5.9) +5 more potentially affected by CVE-2024-38286 via org.apache.tomcat:tomcat-coyote (>=7.0.92, <=7.0.109)

org.apache.tomcat:tomcat-coyote MAVEN version =7.0.92, =3.2.0, =2.0.0-beta1, =7.0.92, =7.0.92, =7.0.92, =7.0.92, =7.0.109 Source cves: CVE-2024-38286 Source advisory: GHSA-7JQF-V358-P8G7...

PT-2024-35546

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved by adding a hash key length check in the virtnet probe function to prevent possible out of bound errors when setting or reading the...

FFmpeg img2dec Heap Buffer Overflow DoS

The vulnerability of the svgprobe function in the libavformat/img2dec.c file of the FFmpeg multimedia library relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using a specially created...

SUSE CVE-2024-50122

In the Linux kernel, the following vulnerability has been resolved: PCI: Hold rescan lock while adding devices during host probe Since adding the PCI power control code, we may end up with a race between the pwrctl platform device rescanning the bus and host controller probe functions. The latter...

DEBIAN-CVE-2024-50122

In the Linux kernel, the following vulnerability has been resolved: PCI: Hold rescan lock while adding devices during host probe Since adding the PCI power control code, we may end up with a race between the pwrctl platform device rescanning the bus and host controller probe functions. The latter...