CVE-2022-48973

CVE-2022-48973 is a Linux kernel vulnerability in the gpio/amd8111 path related to a reference-count leak for PCI devices. The issue arises because for_each_pci_dev() is implemented via pci_get_device(), which increments the reference count for the returned pci_dev but may not decrement the input...

CVE-2022-48973 gpio: amd8111: Fix PCI device reference count leak

In the Linux kernel, the following vulnerability has been resolved: gpio: amd8111: Fix PCI device reference count leak foreachpcidev is implemented by pcigetdevice. The comment of pcigetdevice says that it will increase the reference count for the returned pcidev and also decrease the reference...

CVE-2022-48973 gpio: amd8111: Fix PCI device reference count leak

In the Linux kernel, the following vulnerability has been resolved: gpio: amd8111: Fix PCI device reference count leak foreachpcidev is implemented by pcigetdevice. The comment of pcigetdevice says that it will increase the reference count for the returned pcidev and also decrease the reference...

CVE-2022-48961 net: mdio: fix unbalanced fwnode reference count in mdio_device_release()

In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix unbalanced fwnode reference count in mdiodevicerelease There is warning report about ofnode refcount leak while probing mdio device: OF: ERROR: memory leak, expected refcount 1 instead of 2, ofnodeget/ofnodeput...

CVE-2024-50028 thermal: core: Reference count the zone in thermal_zone_get_by_id()

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Reference count the zone in thermalzonegetbyid There are places in the thermal netlink code where nothing prevents the thermal zone object from going away while being accessed after it has been returned by...

CVE-2024-50028 thermal: core: Reference count the zone in thermal_zone_get_by_id()

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Reference count the zone in thermalzonegetbyid There are places in the thermal netlink code where nothing prevents the thermal zone object from going away while being accessed after it has been returned by...

CVE-2024-50028

CVE-2024-50028 affects the Linux kernel thermal subsystem. The flaw was that thermal_zone_get_by_id() could return a thermal zone object that could be freed while still in use by the caller, enabling a potential use-after-free scenario. The fix adds a reference to the thermal zone device via get_...

CVE-2024-50021 ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icedpllinitrclkpins This patch addresses a reference count handling issue in the icedpllinitrclkpins function. The function calls icedpllgetpins, which increments the reference count of t...

CVE-2024-50020 ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icesriovsetmsixveccount This patch addresses an issue with improper reference count handling in the icesriovsetmsixveccount function. First, the function calls icegetvfbyid, which...

CVE-2024-50020 ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icesriovsetmsixveccount This patch addresses an issue with improper reference count handling in the icesriovsetmsixveccount function. First, the function calls icegetvfbyid, which...

CVE-2024-50020 ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icesriovsetmsixveccount This patch addresses an issue with improper reference count handling in the icesriovsetmsixveccount function. First, the function calls icegetvfbyid, which...

AZL-51408 CVE-2024-50012 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Avoid a bad reference count on CPU node In the parseperfdomain function, if the call to ofparsephandlewithargs returns an error, then the reference to the CPU device node that was acquired at the start of the function...

DEBIAN-CVE-2024-50012

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Avoid a bad reference count on CPU node In the parseperfdomain function, if the call to ofparsephandlewithargs returns an error, then the reference to the CPU device node that was acquired at the start of the function...

CVE-2024-50012 cpufreq: Avoid a bad reference count on CPU node

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Avoid a bad reference count on CPU node In the parseperfdomain function, if the call to ofparsephandlewithargs returns an error, then the reference to the CPU device node that was acquired at the start of the function...

CVE-2024-50012

The CVE-2024-50012 issue is in the Linux kernel cpufreq code. In parse_perf_domain, if of_parse_phandle_with_args returns an error, the initial reference to the CPU device node would not be decremented, potentially leaving a reference handling bug. The fix declares the CPU node variable with a cl...

CVE-2024-50012 cpufreq: Avoid a bad reference count on CPU node

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Avoid a bad reference count on CPU node In the parseperfdomain function, if the call to ofparsephandlewithargs returns an error, then the reference to the CPU device node that was acquired at the start of the function...

AZL-51771 CVE-2024-49988 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...

CVE-2024-49988

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...

DEBIAN-CVE-2024-49988

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add refcnt to ksmbdconn struct When sending an oplock break request, opinfo-conn is used, But freed -conn can be used on multichannel. This patch add a reference count to the ksmbdconn struct so that it can be freed when i...

DEBIAN-CVE-2024-49940

In the Linux kernel, the following vulnerability has been resolved: l2tp: prevent possible tunnel refcount underflow When a session is created, it sets a backpointer to its tunnel. When the session refcount drops to 0, l2tpsessionfree drops the tunnel refcount if session-tunnel is non-NULL...