SUSE-SU-2022:4545-1 Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122133 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation bsc1205128. - CVE-2022-4378: Fixed stack overflow in doprocdointvec bsc1206207. - CVE-2022-3586: Fixed use-after-fre...

SUSE-SU-2022:4534-1 Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-1503005971 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation bsc1205128. - CVE-2022-4378: Fixed stack overflow in doprocdointvec bsc1206207. - CVE-2022-4139: Fixed an issue...

SUSE-SU-2022:4516-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-1503005993 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation bsc1205128. - CVE-2022-4378: Fixed stack overflow in doprocdointvec bsc1206207. - CVE-2022-4139: Fixed an issue...

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2022-2792)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GSD-2022-1008175 media: meson: vdec: fix possible refcount leak in vdec_probe()

media: meson: vdec: fix possible refcount leak in vdecprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.224 by commit...

GSD-2022-1007819 media: meson: vdec: fix possible refcount leak in vdec_probe()

media: meson: vdec: fix possible refcount leak in vdecprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

PT-2022-36074 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.8 Description: A potential issue exists in the vdec probe function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36344 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: A potential issue exists in the vdec probe function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2024-11830 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak has been resolved in the Linux kernel, specifically in the rockchip gpiolib register function. The issue occurred because the node returned by of get parent had its...

PT-2024-11828 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an unbalanced fwnode reference count in the Linux kernel's mdio device release function. This can cause a memory leak, as indicated by a warning report about an...

CLSA-2022-1670261781 Fix of 13 CVEs

CVE-2022-42703 - mm/rmap.c: don't reuse anonvma if we just want a copy - mm: rmap: explicitly reset vma-anonvma in unlinkanonvmas - mm, rmap: handle anonvmaprepare common case inline - mm/rmap: Fix anonvma-degree ambiguity leading to double-reuse CVE-2022-3565 - mISDN: fix use-after-free bugs in...

PT-2025-40149

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to a PCI device reference count leak within the mt7915 pci init hif2 function. The issue arises because the pci get device function increments t...

PT-2025-41019

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the USB gadget f hid functionality. Specifically, when allocation of report desc fails, the reference count opts-refcnt is not decremented, leading to th...

SUSE-SU-2022:3992-1 Security update for dhcp

This update for dhcp fixes the following issues: - CVE-2022-2928: Fixed an option refcount overflow bsc1203988. - CVE-2022-2929: Fixed a DHCP memory leak bsc1203989...

SUSE-SU-2022:3991-1 Security update for dhcp

This update for dhcp fixes the following issues: - CVE-2022-2928: Fixed an option refcount overflow bsc1203988. - CVE-2022-2929: Fixed a DHCP memory leak bsc1203989...

kernel: ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential AB/BA lock with buffermutex and mmaplock syzbot caught a potential deadlock between the PCM runtime-buffermutex and the mm-mmaplock. It was brought by the recent fix to cover the racy read/write and other...

kernel: usb: usbip: fix a refcount leak in stub_probe()

In the Linux kernel, the following vulnerability has been resolved: usb: usbip: fix a refcount leak in stubprobe usbgetdev is called in stubdevicealloc. When stubprobe fails after that, usbputdev needs to be called to release the reference. Fix this by moving usbputdev to sdevfree error path...

GSD-2022-1007659 memory: of: Fix refcount leak bug in of_get_ddr_timings()

memory: of: Fix refcount leak bug in ofgetddrtimings This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...

GSD-2022-1007658 clk: tegra: Fix refcount leak in tegra210_clock_init

clk: tegra: Fix refcount leak in tegra210clockinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...

GSD-2022-1007656 media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init

media: xilinx: vipp: Fix refcount leak in xvipgraphdmainit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.331 by commit...