kernel: NULL pointer dereference in traffic control subsystem

A NULL pointer dereference flaw was found in qdiscgraft in net/sched/schapi.c in the Linux kernel. This issue may allow a local unprivileged user to trigger a denial of service if the allocworkqueue function return is not validated in time of failure, resulting in a system crash or leaked interna...

PT-2025-25912 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.4.0-1086-azure 9118.04.1-Ubuntu Description: The issue is related to the storvsc error wq workqueue in the Linux kernel, which was incorrectly marked as WQ MEM RECLAIM. This marking may cause a deadlock while...

GSD-2023-1002406 ice: Do not use WQ_MEM_RECLAIM flag for workqueue

ice: Do not use WQMEMRECLAIM flag for workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.232 by commit...

GSD-2023-1002389 ice: Do not use WQ_MEM_RECLAIM flag for workqueue

ice: Do not use WQMEMRECLAIM flag for workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.168 by commit...

GSD-2023-1002335 ice: Do not use WQ_MEM_RECLAIM flag for workqueue

ice: Do not use WQMEMRECLAIM flag for workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.12 by commit...

PT-2023-35410 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.12 Description: The issue concerns the use of the WQ MEM RECLAIM flag for workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-35481 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.232 Description: The issue concerns the use of the WQ MEM RECLAIM flag for workqueue. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

SUSE CVE-2019-15924

An issue was discovered in the Linux kernel before 5.0.11. fm10kinitmodule in drivers/net/ethernet/intel/fm10k/fm10kmain.c has a NULL pointer dereference because there is no -ENOMEM upon an allocworkqueue failure...

SUSE CVE-2019-16231

drivers/net/fjes/fjesmain.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference...

SUSE CVE-2019-16229

drivers/gpu/drm/amd/amdkfd/kfdinterrupt.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. NOTE: The security community disputes this issues as not being serious enough to be deserving a CVE id...

SUSE CVE-2019-16230

drivers/gpu/drm/radeon/radeondisplay.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. NOTE: A third-party software maintainer states that the work queue allocation is happening during device initialization, which for a graphics ca...

SUSE CVE-2019-16233

drivers/scsi/qla2xxx/qlaos.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference...

SUSE CVE-2019-16234

drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference...

SUSE CVE-2021-4023

A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1. The kernel can panic when an improper cancellation operation triggers the submission of new io-uring operations during a shortage of free space. This flaw allows a local user with permissions to...

GSD-2023-1002098 dmaengine: idxd: Let probe fail when workqueue cannot be enabled

dmaengine: idxd: Let probe fail when workqueue cannot be enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.90 by commit...

PT-2023-35174 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: The issue is related to the dmaengine: idxd, where the probe fails when the workqueue cannot be enabled. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2023-35036 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.8 Description: The issue is related to the dmaengine: idxd, where the probe fails when the workqueue cannot be enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

GSD-2023-1001735 dmaengine: idxd: Let probe fail when workqueue cannot be enabled

dmaengine: idxd: Let probe fail when workqueue cannot be enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.90 by commit...

GSD-2023-1001666 dmaengine: idxd: Let probe fail when workqueue cannot be enabled

dmaengine: idxd: Let probe fail when workqueue cannot be enabled This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.8 by commit...

GSD-2023-1000449 remoteproc: imx_dsp_rproc: Add mutex protection for workqueue

remoteproc: imxdsprproc: Add mutex protection for workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...