UBUNTU-CVE-2022-50842

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Check whether transferred 2D BO is shmem Transferred 2D BO always must be a shmem BO. Add check for that to prevent NULL dereference if userspace passes a VRAM BO...

UBUNTU-CVE-2022-50849

In the Linux kernel, the following vulnerability has been resolved: pstore: Avoid kcore oops by vmaping with VMIOREMAP An oops can be induced by running 'cat /proc/kcore /dev/null' on devices using pstore with the ram backend because kmapatomic assumes lowmem pages are accessible with va. Unable ...

CVE-2022-50849

CVE-2022-50849: In the Linux kernel, pstore ram-backend backends can trigger an oops when reading /proc/kcore due to kmap_atomic() assuming lowmem pages are addressable via __va(). The bug arises when vmap() is used without mapping the ramoops lowmem pages; read_kcore and aligned_vread can pass a...

CVE-2022-50849 pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP

In the Linux kernel, the following vulnerability has been resolved: pstore: Avoid kcore oops by vmaping with VMIOREMAP An oops can be induced by running 'cat /proc/kcore /dev/null' on devices using pstore with the ram backend because kmapatomic assumes lowmem pages are accessible with va. Unable ...

CVE-2022-50849 pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP

In the Linux kernel, the following vulnerability has been resolved: pstore: Avoid kcore oops by vmaping with VMIOREMAP An oops can be induced by running 'cat /proc/kcore /dev/null' on devices using pstore with the ram backend because kmapatomic assumes lowmem pages are accessible with va. Unable ...

CVE-2022-50842 drm/virtio: Check whether transferred 2D BO is shmem

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Check whether transferred 2D BO is shmem Transferred 2D BO always must be a shmem BO. Add check for that to prevent NULL dereference if userspace passes a VRAM BO...

CVE-2022-50842 drm/virtio: Check whether transferred 2D BO is shmem

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Check whether transferred 2D BO is shmem Transferred 2D BO always must be a shmem BO. Add check for that to prevent NULL dereference if userspace passes a VRAM BO...

CVE-2023-54189 pstore/ram: Add check for kstrdup

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup Add check for the return value of kstrdup and return the error if it fails in order to avoid NULL pointer dereference...

CVE-2023-54189 pstore/ram: Add check for kstrdup

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup Add check for the return value of kstrdup and return the error if it fails in order to avoid NULL pointer dereference...

CVE-2023-54189

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Add check for kstrdup Add check for the return value of kstrdup and return the error if it fails in order to avoid NULL pointer dereference...

CVE-2023-54189

Technical details for CVE-2023-54189 are not provided in the connected documents. The initial description mentions a Linux kernel fix for pstore/ram related to kstrdup(), but no public details (vendors, affected versions, exploits, or remediation) are included; monitor for updates.

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper use of kmapatomic in the pstore ram backend, which could lead to a kernel crash...

PT-2025-54018

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw in the pstore/ram component. A missing check for the return value of the kstrdup function could lead to a NULL pointer dereference. The fix involves...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992235 advisory. In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a pstore/ram: Do not...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from ram pstore not checking the kstrdup return value, which could result in a null pointer dereference...

PT-2025-53996

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of initial ramdisks initrd on m68k platforms where physical memory does not start at address zero, such as on Amiga systems...

CVE-2025-10451

CVE-2025-10451 affects Insyde InsydeH2O (EFI/UEFI) with an unchecked output buffer that can enable arbitrary code execution in System Management Mode (SMM) and may cause SMM memory corruption. The CVE is described as a H19Int15CallbackSmm memory-corruption vulnerability in combined DXE/SMM (SMRAM...

CVE-2025-10451 H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)

Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption...

CVE-2025-10451 H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)

Unchecked output buffer may allowed arbitrary code execution in SMM and potentially result in SMM memory corruption...

The vulnerability of the amdgpu_vram_mgr_fini() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c driver module allows a hacker to cause a service failure in AMD GPU-based Linux operating system Direct Rendering Infrastructure (DRI) kernels.

The vulnerability of the amdgpuvrammgrfini function in the drivers/gpu/drm/amd/amdgpu/amdgpuvrammgr.c driver module is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow an attacker to cause a service failure...