CVE-2022-50702 vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()

In the Linux kernel, the following vulnerability has been resolved: vdpasim: fix possible memory leak in vdpasimnetinit and vdpasimblkinit Inject fault while probing module, if deviceregister fails in vdpasimnetinit or vdpasimblkinit, but the refcount of kobject is not decreased to 0, the name...

CVE-2025-68249

In the Linux kernel, the following vulnerability has been resolved: most: usb: hdmprobe: Fix calling putdevice before device initialization The early error path in hdmprobe can jump to errfreemdev before &mdev-dev has been initialized with deviceinitialize. Calling putdevice&mdev-dev there trigge...

CVE-2025-68181

Technical details for CVE-2025-68181 are not publicly available in the provided documents. Monitor for updates.

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991200)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991200 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: pataocteoncf: Fix refcount leak in octeoncfprobe offinddevicebynode takes reference, we shou...

SUSE CVE-2022-50669

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible name leak in ocxlfileregisterafu If deviceregister returns error in ocxlfileregisterafu, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give ...

EUVD-2022-55733

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynq-ipi: fix error handling while deviceregister fails If deviceregister fails, it has two issues: 1. The name allocated by devsetname is leaked. 2. The parent of device is not NULL, deviceunregister is called in...

EUVD-2022-55736

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible name leak in ocxlfileregisterafu If deviceregister returns error in ocxlfileregisterafu, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give ...

CVE-2022-50669

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible name leak in ocxlfileregisterafu If deviceregister returns error in ocxlfileregisterafu, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give ...

UBUNTU-CVE-2022-50672

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynq-ipi: fix error handling while deviceregister fails If deviceregister fails, it has two issues: 1. The name allocated by devsetname is leaked. 2. The parent of device is not NULL, deviceunregister is called in...

UBUNTU-CVE-2022-50669

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible name leak in ocxlfileregisterafu If deviceregister returns error in ocxlfileregisterafu, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give ...

CVE-2022-50672

CVE-2022-50672 concerns the Linux kernel mailbox path for zynq-ipi where device_register() failures could leak the name allocated by dev_set_name() and leave a non-NULL parent, potentially causing a crash during device cleanup. The described fix calls put_device() to release references and allow ...

CVE-2022-50672 mailbox: zynq-ipi: fix error handling while device_register() fails

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynq-ipi: fix error handling while deviceregister fails If deviceregister fails, it has two issues: 1. The name allocated by devsetname is leaked. 2. The parent of device is not NULL, deviceunregister is called in...

CVE-2022-50669 misc: ocxl: fix possible name leak in ocxl_file_register_afu()

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible name leak in ocxlfileregisterafu If deviceregister returns error in ocxlfileregisterafu, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give ...

CVE-2022-50669

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible name leak in ocxlfileregisterafu If deviceregister returns error in ocxlfileregisterafu, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give ...

PT-2026-37447

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the most register interface function. The function fails to correctly release resources when an error occurs before the device is registered, resulting in the...

EUVD-2022-55680

ZenTao Biz 6.5, ZenTao Max 3.0, ZenTao Open Source Edition 16.5, and ZenTao Open Source Edition 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/user-login.html before using it in a database...

CVE-2025-40197

CVE-2025-40197 pertains to the Linux kernel media: mc driver where the minor number is cleared after device release, which could mismanage device lifecycle. The vulnerability is fixed in the kernel by clearing the minor number before put device, as noted in the advisory and linked kernel commits ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990485)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990485 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: sdio: fix possible resource leaks in some error paths If sdioaddfunc or sdioinitfunc fails,...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988938)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988938 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: Fix refcount leak in imxsgtl5000probe offindi2cdevicebynode takes a reference, In erro...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989881 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: pataocteoncf: Fix refcount leak in octeoncfprobe offinddevicebynode takes reference, we shou...