CVE-2025-68753

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in putuser loop for DSP events In the DSP event handling code, a putuser loop copies event data. When the user buffer size is not aligned to 4 bytes, it could overwrite beyond the buffer...

CVE-2025-68761

CVE-2025-68761 corresponds to a Linux kernel vulnerability in the HFS filesystem. The issue is a use-after-free in hfs_correct_next_unused_CNID() where a reference is dropped with hfs_bnode_put(node) and then the code dereferences node on the next line. The documented fix swaps these two lines so...

CVE-2025-68757 drm/vgem-fence: Fix potential deadlock on release

In the Linux kernel, the following vulnerability has been resolved: drm/vgem-fence: Fix potential deadlock on release A timer that expires a vgem fence automatically in 10 seconds is now released with timerdeletesync from fence-ops.release called on last dmafenceput. In some scenarios, it can run...

CVE-2025-68757

CVE-2025-68757 pertains to the Linux kernel, specifically the DRM vgам fence path. The issue arises in drm/vgem-fence: a timer that expires a vgem fence could be released from fence->ops.release() in IRQ context. The fix released the timer with timer_delete_sync() when the last dma_fence_put()...

CVE-2025-68753

Technical details for CVE-2025-68753 are not provided in the connected documents. The initial description notes a bounds-check fix in ALSA firewire-motu DSP event handling, but no further public details are included here. Monitor for updates.

CVE-2025-68753

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in putuser loop for DSP events In the DSP event handling code, a putuser loop copies event data. When the user buffer size is not aligned to 4 bytes, it could overwrite beyond the buffer...

CVE-2025-68753 ALSA: firewire-motu: add bounds check in put_user loop for DSP events

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in putuser loop for DSP events In the DSP event handling code, a putuser loop copies event data. When the user buffer size is not aligned to 4 bytes, it could overwrite beyond the buffer...

PT-2026-1241

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A flaw exists in the handling of DSP events within the ALSA firewire-motu module. A missing bounds check in a put user loop could allow overwriting beyond the user buffer boundary when t...

PT-2026-26119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s io uring/rw functionality where an allocated iovec may be freed incorrectly during a read/write request cleanup process. Specifically, if a read/write...

PT-2026-6133

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to the uacce subsystem and safe queue release. Directly calling the put queue function poses a risk because it does not guarantee that resource...

PT-2026-6142

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the l2tp udp encap recv function. The issue was identified by syzbot, which reported a memory leak of structures like l2tp session, l2tp tunnel...

PT-2026-4495

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A race condition can lead to a use-after-free issue within the ublk subsystem. Specifically, the vulnerability occurs between the asynchronous partition scan work and device teardown,...

PT-2026-27752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the pinctrl subsystem, specifically in the cirrus driver related to the cs42l43 component. A double-put operation exists in the cs42l43 pin probe...

CVE-2022-50785

In the Linux kernel, the following vulnerability has been resolved: fsi: occ: Prevent use after free Use getdevice and putdevice in the open and close functions to make sure the device doesn't get freed while a file descriptor is open. Also, lock around the freeing of the device buffer and check...

CVE-2022-50868

In the Linux kernel, the following vulnerability has been resolved: hwrng: amd - Fix PCI device refcount leak foreachpcidev is implemented by pcigetdevice. The comment of pcigetdevice says that it will increase the reference count for the returned pcidev and also decrease the reference count for...

CVE-2022-50848

In the Linux kernel, the following vulnerability has been resolved: drivers: dio: fix possible memory leak in dioinit If deviceregister returns error, the 'dev' and name needs be freed. Add a release function, and then call putdevice in the error path, so the name is freed in kobjectcleanup and t...

SUSE CVE-2022-50785

In the Linux kernel, the following vulnerability has been resolved: fsi: occ: Prevent use after free Use getdevice and putdevice in the open and close functions to make sure the device doesn't get freed while a file descriptor is open. Also, lock around the freeing of the device buffer and check...

SUSE CVE-2022-50810

In the Linux kernel, the following vulnerability has been resolved: rapidio: devices: fix missing putdevice in mportcdevopen When kfifoalloc fails, the refcount of chdev-dev is left incremental. We should use putdevice&chdev-dev to decrease the ref count of chdev-dev to avoid refcount leak...

SUSE CVE-2022-50824

In the Linux kernel, the following vulnerability has been resolved: tpm: tpmtis: Add the missed acpiputtable to fix memory leak In checkacpitpm2, we get the TPM2 table just to make sure the table is there, not used after the init, so the acpiputtable should be added to release the ACPI memory...

SUSE CVE-2022-50825

In the Linux kernel, the following vulnerability has been resolved: usb: typec: wusb3801: fix fwnode refcount leak in wusb3801probe I got the following report while doing fault injection test: OF: ERROR: memory leak, expected refcount 1 instead of 4, ofnodeget/ofnodeput unbalanced - destroy cset...