3 matches found
CVE-2025-37779 lib/iov_iter: fix to increase non slab folio refcount
In the Linux kernel, the following vulnerability has been resolved: lib/ioviter: fix to increase non slab folio refcount When testing EROFS file-backed mount over v9fs on qemu, I encountered a folio UAF issue. The page sanity check reports the following call trace. The root cause is that pages in...
CVE-2024-50021 ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()
In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icedpllinitrclkpins This patch addresses a reference count handling issue in the icedpllinitrclkpins function. The function calls icedpllgetpins, which increments the reference count of t...
CVE-2021-47327
The CVE-2021-47327 issue concerns the Linux kernel’s iommu/arm-smmu path. arm_smmu_rpm_get() calls pm_runtime_get_sync(), which can inflate the refcount of the SMMU even when the function returns a negative error, causing a refcount leak if callers don’t balance it on failure. A fix is documented...