CVE-2023-54136 serial: sprd: Fix DMA buffer leak issue

In the Linux kernel, the following vulnerability has been resolved: serial: sprd: Fix DMA buffer leak issue Release DMA buffer when probe returns failure to avoid memory leak...

CVE-2023-54136

CVE-2023-54136 concerns a memory leak in the Linux kernel’s serial driver for sprd when _probe() returns failure. The fix releases the DMA buffer to avoid leaks. Connected Astra Linux entry confirms the same vulnerability and the fix across kernel lines (linux-5.10, linux-5.15, linux-6.1). The im...

CVE-2023-54136 serial: sprd: Fix DMA buffer leak issue

In the Linux kernel, the following vulnerability has been resolved: serial: sprd: Fix DMA buffer leak issue Release DMA buffer when probe returns failure to avoid memory leak...

CVE-2023-54126

CVE-2023-54126 : Linux kernel crypto_safexcel vulnerability where a failed safexcel driver load leaves IRQ affinity/workqueues uncleared, causing a boot-time warning. The fix cleans up the IRQ affinity and workqueues on load failure, per the vulnerability description and vendor advisories. Connec...

CVE-2023-54053 wifi: iwlwifi: pcie: fix possible NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix possible NULL pointer dereference It is possible that iwlpciprobe will fail and free the trans, then afterwards iwlpciremove will be called and crash by trying to access trans which is already freed, fix...

CVE-2023-54053

CVE-2023-54053 is a Linux kernel issue affecting the iwlwifi PCIe path, causing a NULL pointer dereference during device removal after a failed iwl_pci_probe(). The vulnerability is described in connected vendor advisories as a fix for a crash when removing a device while its transmission structu...

CVE-2023-54053 wifi: iwlwifi: pcie: fix possible NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix possible NULL pointer dereference It is possible that iwlpciprobe will fail and free the trans, then afterwards iwlpciremove will be called and crash by trying to access trans which is already freed, fix...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the possibility that iwlwifi pcie may access freed memory when removed after a probe failure, potentially...

PT-2025-53213

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue was identified in the serial driver for Spreadtrum devices. Specifically, the issue occurs when the probe function fails during device initialization, leading to a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to free DMA buffers when sprd serial driverprobe fails, which could lead to a memory leak...

Linux Distros Unpatched Vulnerability : CVE-2023-54136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: sprd: Fix DMA buffer leak issue Release DMA buffer when probe returns failure to avoid memory leak. CVE-2023-54136 Note that Nessus relies on the presen...

most: usb: fix double free on late probe failure

...

SUSE CVE-2025-68170

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree devres managed rdev Since the allocation of the drivers main structure was changed to devmdrmdevalloc rdev is managed by devres and we shouldn't be calling kfree on it. This fixes things exploding if the...

SUSE CVE-2025-68204

In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: scmi: Fix genpd leak on provider registration failure If ofgenpdaddprovideronecell fails during probe, the previously created generic power domains are not removed, leading to a memory leak and potential kernel cra...

SUSE CVE-2025-68316

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix invalid probe error return value After DME Link Startup, the error return value is set to the MIPI UniPro GenericErrorCode which can be 0 SUCCESS or 1 FAILURE. Upon failure during driver probe, the error code...

EUVD-2025-203753

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix invalid probe error return value After DME Link Startup, the error return value is set to the MIPI UniPro GenericErrorCode which can be 0 SUCCESS or 1 FAILURE. Upon failure during driver probe, the error code...

EUVD-2025-203790

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST...

CVE-2025-68316

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix invalid probe error return value After DME Link Startup, the error return value is set to the MIPI UniPro GenericErrorCode which can be 0 SUCCESS or 1 FAILURE. Upon failure during driver probe, the error code...

CVE-2025-68290

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST...

CVE-2025-68290 most: usb: fix double free on late probe failure

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST...