GSD-2023-1000682 orangefs: Fix sysfs not cleanup when dev init failed

orangefs: Fix sysfs not cleanup when dev init failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000514 orangefs: Fix kmemleak in orangefs_sysfs_init()

orangefs: Fix kmemleak in orangefssysfsinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000453 PCI/sysfs: Fix double free in error path

PCI/sysfs: Fix double free in error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000368 hwmon: (coretemp) Check for null before removing sysfs attrs

hwmon: coretemp Check for null before removing sysfs attrs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.301 by commit...

GSD-2023-1000337 hwmon: (coretemp) Check for null before removing sysfs attrs

hwmon: coretemp Check for null before removing sysfs attrs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.268 by commit...

GSD-2023-1000300 hwmon: (coretemp) Check for null before removing sysfs attrs

hwmon: coretemp Check for null before removing sysfs attrs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.226 by commit...

GSD-2023-1000243 hwmon: (coretemp) Check for null before removing sysfs attrs

hwmon: coretemp Check for null before removing sysfs attrs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.158 by commit...

GSD-2023-1000170 hwmon: (coretemp) Check for null before removing sysfs attrs

hwmon: coretemp Check for null before removing sysfs attrs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.82 by commit...

GSD-2023-1000078 hwmon: (coretemp) Check for null before removing sysfs attrs

hwmon: coretemp Check for null before removing sysfs attrs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

PT-2023-33844 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential memory leak issue was discovered in the solo sysfs init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33776 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns the RDMA/core component of the Linux Kernel, where the ib port is not properly validated when accessing a sysfs node. The actual impact and attack plausibility have not ye...

PT-2023-33139 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a wrong empty schemes assumption under online tuning in the damon sysfs set schemes function. The actual impact and attack plausibility have not yet been proven...

PT-2023-33530 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A double free issue in the error path of PCI/sysfs has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2025-37887

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free flaw within the lpfc wr object routine during the sysfs firmware write process. The driver accesses data through a pointer wr object after th...

PT-2025-37897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to a NULL dereference within the blk mq elv switch none function. This issue occurs when the q-elevator pointer becomes NULL after acquiring the...

PT-2025-37691

Name of the Vulnerable Software and Affected Versions: linux affected versions not specified Description: The Linux kernel contains a flaw in the dmi-sysfs module related to a null-pointer dereference. A previous patch introduced kobject put to release memory, which calls dmi sysfs entry release...

Unbreakable Enterprise kernel security update

5.4.17-2136.314.6.2 - proc: procskipspaces shouldn't think it is working on C strings Linus Torvalds Orabug: 34883034 CVE-2022-4378 - proc: avoid integer type confusion in getproclong Linus Torvalds Orabug: 34883034 CVE-2022-4378 5.4.17-2136.314.6.1 - RDMA/uverbs: Move IBEVENTDEVICEFATAL to...

GSD-2022-1008337 iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()

iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.334 by commit...

GSD-2022-1008286 iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()

iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.300 by commit...

GSD-2022-1008220 iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()

iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.267 by commit...