4649 matches found
CVE-2022-50870
CVE-2022-50870: In the Linux kernel (powerpc RTAS), rtas_os_term() could hang during panic due to risky device-tree traversal when devtree_lock is held. The fix caches relevant RTAS/DT characteristics at boot and changes the ibm,extended-os-term lookup to a boolean property via of_property_read_b...
CVE-2022-50870 powerpc/rtas: avoid device tree lookups in rtas_os_term()
In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid device tree lookups in rtasosterm rtasosterm is called during panic. Its behavior depends on a couple of conditions in the /rtas node of the device tree, the traversal of which entails locking and local IRQ...
CVE-2023-54230 amba: bus: fix refcount leak
In the Linux kernel, the following vulnerability has been resolved: amba: bus: fix refcount leak commit 5de1540b7bc4 "drivers/amba: create devices from device tree" increases the refcount of ofnode, but not releases it in ambadevicerelease, so there is refcount leak. By using ofnodeput to avoid...
CVE-2023-54230 amba: bus: fix refcount leak
In the Linux kernel, the following vulnerability has been resolved: amba: bus: fix refcount leak commit 5de1540b7bc4 "drivers/amba: create devices from device tree" increases the refcount of ofnode, but not releases it in ambadevicerelease, so there is refcount leak. By using ofnodeput to avoid...
CVE-2023-54230
CVE-2023-54230 affects the Linux kernel in the amba: bus subsystem. The vulnerability stems from a refcount leak where refining devices from device tree increased the refcount of of_node but could not release it in amba_device_release, leading to a leak. The fix uses of_node_put to correctly rele...
PT-2025-54059
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the AMBA bus driver within the Linux kernel. The issue stems from an increase in the reference count of an of node during device creation from a device...
PT-2025-53941
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the tegra114 clock init function within the clock subsystem of the Linux kernel. The of find matching node function increments the reference count of the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992626)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992626 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate ltreedepth to avoid out-of-bounds access The ltreedepth field is 16-bit le16, but...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992615)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992615 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/pci: Fix getphbnumber locking The recent change to getphbnumber causes a DEBUGATOMICSLEEP...
Linux Distros Unpatched Vulnerability : CVE-2023-54280
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: fix potential race when tree connecting ipc Protect access of TCPServerInfo::hostname when building the ipc tree name as it might get freed in cifsd threa...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improper device tree lookup, which could lead to a system hang...
PT-2025-54123
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s regulator core, specifically within the regulator dev lookup function, leading to an unbalanced device tree node reference count. This occurs because...
PT-2025-53988
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s powerpc/rtas component where the rtas os term function, called during kernel panic, could potentially hang the system if devtree lock is held. This...
SUSE CVE-2022-50766
In the Linux kernel, the following vulnerability has been resolved: btrfs: set generation before calling btrfscleantreeblock in btrfsinitnewbuffer syzbot is reporting uninit-value in btrfscleantreeblock 1, for commit bc877d285ca3dba2 "btrfs: Deduplicate extentbuffer init code" missed that...
SUSE CVE-2023-54135
In the Linux kernel, the following vulnerability has been resolved: mapletree: fix potential out-of-bounds access in maswrendpiv Check the write offset end bounds before using it as the offset into the pivot array. This avoids a possible out-of-bounds access on the pivot array if the write extend...
EUVD-2022-55795
In the Linux kernel, the following vulnerability has been resolved: btrfs: set generation before calling btrfscleantreeblock in btrfsinitnewbuffer syzbot is reporting uninit-value in btrfscleantreeblock 1, for commit bc877d285ca3dba2 "btrfs: Deduplicate extentbuffer init code" missed that...
UBUNTU-CVE-2022-50782
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch caused by bad quota inode We got a issue as fllows: ================================================================== kernel BUG at fs/ext4/extentsstatus.c:202! invalid opcode: 0000 1 PREEMPT SMP...
UBUNTU-CVE-2022-50745
In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix devicenode use after free At probe time this code path is followed: tegracsiinit tegracsichannelsalloc foreachchildofnodenode, channel -- iterates over channels automatically gets 'channel'...
UBUNTU-CVE-2022-50766
In the Linux kernel, the following vulnerability has been resolved: btrfs: set generation before calling btrfscleantreeblock in btrfsinitnewbuffer syzbot is reporting uninit-value in btrfscleantreeblock 1, for commit bc877d285ca3dba2 "btrfs: Deduplicate extentbuffer init code" missed that...
CVE-2023-54135
In the Linux kernel, the following vulnerability has been resolved: mapletree: fix potential out-of-bounds access in maswrendpiv Check the write offset end bounds before using it as the offset into the pivot array. This avoids a possible out-of-bounds access on the pivot array if the write extend...