GSD-2023-1000449 remoteproc: imx_dsp_rproc: Add mutex protection for workqueue

remoteproc: imxdsprproc: Add mutex protection for workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2025-52975

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/MSM/HDMI subsystem. Specifically, a missing check for the return value of alloc ordered workqueue can lead to a NULL pointer dereference in hdmi...

PT-2025-49740

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/MSM subsystem related to a workqueue leak occurring during bind errors. Specifically, the workqueue was not being properly destroyed in cases of...

PT-2025-40126

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc5 mlnx Description A flaw exists in the net/mlx5 component of the Linux kernel related to delayed bond work cancellation. A missing call to cancel delayed work could lead to the execution of code on an...

PT-2022-7518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the workqueue enabling process in the Linux kernel. When the driver is removed, it assumes that the workqueue was enabled successfully and attempts to free...

PT-2025-38179

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-ptr-deref issue exists in the vkms release function within the drm/vkms module of the Linux kernel. This occurs when attempting to destroy a workqueue composer workq that has not...

PT-2024-11885

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak issue has been identified in the Linux kernel, specifically in the iavf init module function. The function fails to destroy the workqueue when pci register driver fails,...

PT-2025-49614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s power management component, specifically within the cw2015 driver. The cw bat probe function does not check the return value of create singlethread...

GSD-2022-1007101 xfrm: Reinject transport-mode packets through workqueue

xfrm: Reinject transport-mode packets through workqueue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...

PT-2022-35190 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.1 Description: The issue is related to the Bluetooth functionality in the Linux Kernel. It involves the use of hdev-workqueue when queuing hdev-cmd,ncmd timer works. The actual impact and attack plausibilit...

PT-2022-35341 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.58 through v5.15.74 Description: A memory leak issue was discovered in the hpd rx irq create workqueue function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35089 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A memory leak issue was discovered in the hpd rx irq create workqueue function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35356 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue concerns the xfrm component, specifically the reinjection of transport-mode packets through a workqueue. The actual impact and attack plausibility have not yet been proven...

PT-2024-11886

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak issue has been resolved in the Linux kernel. The ixgbevf init module function did not destroy the workqueue created by create singlethread workqueue when pci register...

PT-2022-35107 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the reinjection of transport-mode packets through a workqueue in the xfrm module. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-7338 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the flush all cpu locked function in the Linux kernel's memory management subsystem. When this function is called from a task context, it may cause a dependency...

PT-2022-34193 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.212 Description: The issue is related to the removal of WQ MEM RECLAIM from storvsc error wq in the scsi: storvsc component. The actual impact and attack plausibility have not yet been proven...

PT-2022-34337 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.257 Description: The issue is related to the removal of WQ MEM RECLAIM from storvsc error wq in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-33993 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.140 Description: The issue is related to the removal of WQ MEM RECLAIM from storvsc error wq in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-33671 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.66 Description: A potential security issue exists due to a defer destroy workqueue call in the ieee802154/adf7242 module. The actual impact and attack plausibility have not yet been proven. Recommendations...