CVE-2023-53842 ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove The MBHC resources must be released on component probe failure and removal so can not be tied to the lifetime of the component device. This is specifically needed ...

CVE-2023-53842

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove The MBHC resources must be released on component probe failure and removal so can not be tied to the lifetime of the component device. This is specifically needed ...

CVE-2023-53840 usb: early: xhci-dbc: Fix a potential out-of-bound memory access

In the Linux kernel, the following vulnerability has been resolved: usb: early: xhci-dbc: Fix a potential out-of-bound memory access If xdbcbulkwrite fails, the values in 'buf' can be anything. So the string is not guaranteed to be NULL terminated when xdbctrace is called. Reserve an extra byte,...

CVE-2022-50676 net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()

In the Linux kernel, the following vulnerability has been resolved: net: rds: don't hold sock lock when cancelling work from rdstcpresetcallbacks syzbot is reporting lockdep warning at rdstcpresetcallbacks 1, for commit ac3615e7f3cffe2a "RDS: TCP: Reduce code duplication in rdstcpresetcallbacks"...

CVE-2023-53791

In the Linux kernel, the following vulnerability has been resolved: md: fix warning for holder mismatch from exportrdev Commit a1d767191096 "md: use mddev-external to select holder in exportrdev" fix the problem that 'claimrdev' is used for blkdevgetbydev while 'rdev' is used for blkdevput...

DEBIAN-CVE-2023-53791

In the Linux kernel, the following vulnerability has been resolved: md: fix warning for holder mismatch from exportrdev Commit a1d767191096 "md: use mddev-external to select holder in exportrdev" fix the problem that 'claimrdev' is used for blkdevgetbydev while 'rdev' is used for blkdevput...

SUSE CVE-2025-40317

In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix buscontext pointer in regmap init calls Commit 4e65bda8273c "ASoC: wcd934x: fix error handling in wcd934xcodecparsedata" revealed the problem in the slimbus regmap. That commit breaks audio playback, for...

CVE-2023-53791

CVE-2023-53791 concerns the Linux kernel's md (device-mapper/RAID) code. The issue arises from a mismatch of the holder between export_rdev() and blkdev_put() when mddev->external toggles from 0 to 1: a rdev may be used as a holder by blkdev_get_by_dev() but the corresponding release uses clai...

CVE-2023-53788

Technical details about CVE-2023-53788 are not provided in the connected documents. The SUSE advisories list the vulnerability, but no specifics on affected products/versions, root cause, or fixes are disclosed here. Monitor for updates.

KB5071506: Windows Server 2008 R2 Security Update (December 2025)

The remote Windows host is missing security update 5071506. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Heap-based buffer...

PT-2025-49733

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the MBHC Multi-channel High-definition Codec component removal process within the ASoC ALSA system on chip codecs of the Linux kernel. Specifically, MBHC...

PT-2025-49651

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc2-00121-g01e55c376936-dirty Description The Linux kernel contains an issue related to a holder mismatch within the export rdev function in the md multiple device subsystem. A warning occurs when claim rde...

Linux Distros Unpatched Vulnerability : CVE-2023-53823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block/rqqos: protect rqqos apis with a new lock commit 50e34d78815e block: disable the elevator int delgendisk move rqqosexit from diskrelease to delgendisk, th...

Linux Distros Unpatched Vulnerability : CVE-2023-53866

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: soc-compress: Reposition and add pcmmutex If paniconwarn is set and compress streamDPCM is started, then kernel panic occurred because card-pcmmutex isn'...

CVE-2022-50633

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix memory leak in dwc3qcominterconnectinit oficcget alloc resources for path handle, we should release it when not need anymore. Like the release in dwc3qcominterconnectexit function. Add iccput in error handlin...

CVE-2023-53761

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...

CVE-2023-53760

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: mcq: Fix &hwq-cqlock deadlock issue When ufshcderrhandler is executed, CQ event interrupt can enter waiting for the same lock. This can happen in ufshcdhandlemcqcqevents and also in ufsmtkmcqintr. The following...

CVE-2025-40302 media: videobuf2: forbid remove_bufs when legacy fileio is active

In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: forbid removebufs when legacy fileio is active vb2ioctlremovebufs call manipulates queue internal buffer list, potentially overwriting some pointers used by the legacy fileio access mode. Forbid that ioctl when...

Linux Kernel DoS

The vulnerability of the createsdwdailink function in the sound/soc/intel/boards/sofsdw.c file, a part of the SoC support subsystem and used for portable audio decoders in Linux operating systems, is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause...

Linux kernel Bluetooth Heap Buffer Overflow DoS

The vulnerability of the isoconnbigsync function in the net/bluetooth/iso.c module of the Linux kernel’s Bluetooth subsystem is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...