CVE-2025-37779 lib/iov_iter: fix to increase non slab folio refcount

In the Linux kernel, the following vulnerability has been resolved: lib/ioviter: fix to increase non slab folio refcount When testing EROFS file-backed mount over v9fs on qemu, I encountered a folio UAF issue. The page sanity check reports the following call trace. The root cause is that pages in...

CVE-2024-50021 ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icedpllinitrclkpins This patch addresses a reference count handling issue in the icedpllinitrclkpins function. The function calls icedpllgetpins, which increments the reference count of t...

CVE-2021-47327

The Linux kernel contains a reference counting vulnerability in the iommu/arm-smmu driver (specifically the arm_smmu_device refcount). The root cause is that the arm_smmu_rpm_get() function invokes pm_runtime_get_sync(), which increments the "smmu" refcount even when the return value is less than...