kernel: Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()"

In the Linux kernel, the following vulnerability has been resolved: Revert "usb: typec: ucsi: add a common function ucsiunregisterconnectors" The recent commit 87d0e2f41b8c "usb: typec: ucsi: add a common function ucsiunregisterconnectors" introduced a regression that caused NULL dereference at...

kernel: RDMA/core: Make sure "ib_port" is valid when access sysfs node

A NULL pointer dereference flaw was found in the Linux kernel RDMA core's sysfs handling. A local user with access to InfiniBand sysfs nodes can read sysfs attributes while an InfiniBand port is being removed, causing the kernel to dereference a NULL ibport pointer when the port structure has bee...

kernel: driver core: fix potential null-ptr-deref in device_add()

A NULL pointer dereference was found in the driver core's deviceadd function. When dpmsysfsadd fails after busadddevice succeeds, the error path attempts to remove the driver binding that was never completed, causing a crash...

kernel: drm/amdkfd: Fix kernel warning during topology setup

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kernel warning during topology setup This patch fixes the following kernel warning seen during driver load by correctly initializing the p2plink attr before creating the sysfs file: +0.002865 ------------ cut here...

kernel: amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()

An array underflow vulnerability was found in the Linux kernel's AMD GPU power management driver. In vega20odneditdpmtable, the inputindex variable is validated to be at most 2 but is not checked for negative values. Since this value is user-controlled via sysfs, a user can provide a negative val...

kernel: thermal: core: call put_device() only after device_register() fails

In the Linux kernel, the following vulnerability has been resolved: thermal: core: call putdevice only after deviceregister fails putdevice shouldn't be called before a prior call to deviceregister. thermalcoolingdeviceregister doesn't follow that properly and needs fixing. Also...

kernel: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q-elevator in blkmqelvswitchnone After grabbing q-sysfslock, q-elevator may become NULL because of elevator switch. Fix the NULL dereference on q-elevator by checking it with lock...

kernel: driver core: fix potential null-ptr-deref in device_add()

A NULL pointer dereference was found in the driver core's deviceadd function. When dpmsysfsadd fails after busadddevice succeeds, the error path attempts to remove the driver binding that was never completed, causing a crash...

kernel: RDMA/core: Make sure "ib_port" is valid when access sysfs node

A NULL pointer dereference flaw was found in the Linux kernel RDMA core's sysfs handling. A local user with access to InfiniBand sysfs nodes can read sysfs attributes while an InfiniBand port is being removed, causing the kernel to dereference a NULL ibport pointer when the port structure has bee...

GHSA-JQ35-85CJ-FJ4P /sys/devices/virtual/powercap accessible by default to containers

Intel's RAPL Running Average Power Limit feature, introduced by the Sandy Bridge microarchitecture, provides software insights into hardware energy consumption. To facilitate this, Intel introduced the powercap framework in Linux kernel 3.13, which reads values via relevant MSRs model specific...

PT-2025-41120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The lio target nacl info show function within the iSCSI target component does not properly validate buffer lengths when using sprintf in a loop to display details for each iSCSI...

The vulnerability of the read_descriptors() function in the drivers/usb/core/sysfs.c file of the Linux kernel’s USB driver allows a attacker to cause a service failure.

The vulnerability of the readdescriptors function in the drivers/usb/core/sysfs.c file of the Linux kernel’s USB driver is related to reading a reserved buffer from outside the system. Exploiting this vulnerability could allow an attacker to cause a service failure...

An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.

...

AZL-27388 CVE-2023-37453 affecting package kernel for versions less than 5.15.135.1-2

An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in readdescriptors in drivers/usb/core/sysfs.c...

UBUNTU-CVE-2023-37453

An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in readdescriptors in drivers/usb/core/sysfs.c...

kernel: hwmon: (coretemp) Check for null before removing sysfs attrs

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Check for null before removing sysfs attrs If coretempaddcore gets an error then pdata-coredataindx is already NULL and has been kfreed. Don't pass that to sysfsremovegroup as that will crash in sysfsremovegroup...

kernel: scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()

A flaw was found in the iSCSI TCP component in the Linux kernel. A race condition between releasing a socket and accessing it via sysfs can lead to a NULL pointer dereference when calling getpeername. This issue can cause a crash and result in a denial of service...

kernel: hwmon: (coretemp) Check for null before removing sysfs attrs

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Check for null before removing sysfs attrs If coretempaddcore gets an error then pdata-coredataindx is already NULL and has been kfreed. Don't pass that to sysfsremovegroup as that will crash in sysfsremovegroup...

kernel: Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()"

In the Linux kernel, the following vulnerability has been resolved: Revert "usb: typec: ucsi: add a common function ucsiunregisterconnectors" The recent commit 87d0e2f41b8c "usb: typec: ucsi: add a common function ucsiunregisterconnectors" introduced a regression that caused NULL dereference at...

kernel: Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()"

In the Linux kernel, the following vulnerability has been resolved: Revert "usb: typec: ucsi: add a common function ucsiunregisterconnectors" The recent commit 87d0e2f41b8c "usb: typec: ucsi: add a common function ucsiunregisterconnectors" introduced a regression that caused NULL dereference at...