UBUNTU-CVE-2023-54248

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add check for kmemdup Since the kmemdup may return NULL pointer, it should be better to add check for the return value in order to avoid NULL pointer dereference...

CVE-2022-50889 dm integrity: Fix UAF in dm_integrity_dtr()

In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dmintegritydtr Dmintegrity also has the same UAF problem when dmresume and dmdestroy are concurrent. Therefore, cancelling timer again in dmintegritydtr...

CVE-2023-54317

CVE-2023-54317 – Linux kernel dm-flakey zero-page corruption fixed Root cause: When zeroing a range on a block device, dm-flakey could submit a write bio whose bio vector pointed to the zero page, and if corrupt bio writes were enabled it could corrupt the zero page, causing crashes because users...

CVE-2023-54304 firmware: meson_sm: fix to avoid potential NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: firmware: mesonsm: fix to avoid potential NULL pointer dereference ofmatchdevice may fail and returns a NULL pointer. Fix this by checking the return value of ofmatchdevice...

CVE-2023-54302

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix data race on CQP completion stats CQP completion statistics is read lockesly in irdmawaitevent and irdmacheckcqpprogress while it can be updated in the completion thread irdmascccqgetcqeinfo on another CPU as KCSA...

CVE-2023-54267

Technical details for CVE-2023-54267 are not publicly available in the provided documents. The initial entry mentions a Linux kernel fix in powerpc/pseries and lppaca_shared_proc() but does not specify affected products/versions or remediation specifics beyond generic description; monitor for upd...

CVE-2023-54257

CVE-2023-54257 affects the Linux kernel net/macb driver. The issue is memory corruption in extended buffer descriptor mode, tied to RX/DMA handling (CONFIG_DMA_API_DEBUG=y reveals unmaps/free of DMA memory not allocated). A fix has been released in the Linux kernel (refs include upstream commits ...

CVE-2023-54246

CVE-2023-54246 affects the Linux kernel. The issue arises from rcuscale: rcu_scale_writer() scheduling using schedule_timeout_uninterruptible(), which can hang when rcuscale.holdoff exceeds hung_task_timeout_secs. The fix replaces schedule_timeout_uninterruptible() with schedule_timeout_idle(), a...

CVE-2023-54244

In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: Fix oops when removing custom query handlers When removing custom query handlers, the handler might still be used inside the EC query workqueue, causing a kernel oops if the module holding the callback function was...

CVE-2022-50853 NFSv4: Fix a credential leak in _nfs4_discover_trunking()

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a credential leak in nfs4discovertrunking...

CVE-2022-50847

CVE-2022-50847 is a Linux kernel vulnerability affecting the DRM bridge for it6505. The issue occurs when the HPD interrupt fires before the DRM subsystem has registered it6505 as a DRM bridge, causing the driver to access the AUX channel and trigger a NULL pointer dereference. The documented fix...

CVE-2022-50847 drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize AUX channel in it6505i2cprobe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channe...

CVE-2023-54170

CVE-2023-54170: In the Linux kernel, dns_query() can in rare cases create a duplicate index key in a keyring assoc_array when resolving a hostname. This leads to a kernel BUG_ON() and a crash. The issue occurs during keyring association and DNS resolver interaction in the kernel’s DNS resolver pa...

CVE-2022-50822 RDMA/restrack: Release MR restrack when delete

In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: Release MR restrack when delete The MR restrack also needs to be released when delete it, otherwise it cause memory leak as the task struct won't be released...

PT-2025-53938

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s dmc620 pmu init function within the perf/arm dmc620 module. The function fails to remove a callback added by cpuhp setup state multi when platform...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992389)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992389 advisory. In the Linux kernel, the following vulnerability has been resolved: md/raid10: prevent soft lockup while flush writes Currently, there is no limit for raid1/raid10...

PT-2025-54070

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc3+ 1671 Description The Linux kernel contains a flaw related to KVM on MIPS architecture. Specifically, a NULL pointer dereference can occur when creating a KVM guest after a commit removed KVM TE support...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992371)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992371 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: verify the expected usbendpoints are present The bug arises when a USB device claims...

PT-2025-54042

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc5-syzkaller-00199-g5af6ce704936 Description The Linux kernel driver for sisusbvga devices lacked checks to ensure the validity of USB endpoints, specifically their presence and type. This deficiency allow...

PT-2025-53982

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s nilfs2 filesystem implementation where a corrupted superblock data field, specifically s log block size, if excessively large, can lead to a...