CVE-2022-50445

Summary: CVE-2022-50445 is a Linux kernel vulnerability where an attacker could trigger reinjection of transport-mode packets through a workqueue in the XFRM path, potentially leading to system instability. The issue is associated with the 6.x kernel series (example shown: 6.0.0-rc6+ #39) and is ...

CVE-2022-50441

CVE-2022-50441 details (Linux kernel, net/mlx5): A bug introduced by commit 0d4e8ed139d8 removed a call to cancel_delayed_work_sync(), which could cause a queued delay to expire on an already destroyed workqueue, potentially leading to a kernel NULL pointer dereference. The fix restores cancel_de...

CVE-2022-50441 net/mlx5: Lag, fix failure to cancel delayed bond work

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Lag, fix failure to cancel delayed bond work Commit 0d4e8ed139d8 "net/mlx5: Lag, avoid lockdep warnings" accidentally removed a call to cancel delayed bond work thus it may cause queued delay to expire and fall on an...

CVE-2022-50441 net/mlx5: Lag, fix failure to cancel delayed bond work

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Lag, fix failure to cancel delayed bond work Commit 0d4e8ed139d8 "net/mlx5: Lag, avoid lockdep warnings" accidentally removed a call to cancel delayed bond work thus it may cause queued delay to expire and fall on an...

CVE-2022-50426

CVE-2022-50426 affects the Linux kernel remoteproc path for imx_dsp_rproc. The issue arises from a workqueue that may run after rproc_stop_subdevices releases resources, allowing rproc_vq_interrupt to access freed rpmsg endpoints. The fix adds mutex protection in imx_dsp_rproc_vq_work to skip rpr...

CVE-2022-50426 remoteproc: imx_dsp_rproc: Add mutex protection for workqueue

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxdsprproc: Add mutex protection for workqueue The workqueue may execute late even after remoteproc is stopped or stopping, some resources rpmsg device and endpoint have been released in rprocstopsubdevices, then...

CVE-2022-50426 remoteproc: imx_dsp_rproc: Add mutex protection for workqueue

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxdsprproc: Add mutex protection for workqueue The workqueue may execute late even after remoteproc is stopped or stopping, some resources rpmsg device and endpoint have been released in rprocstopsubdevices, then...

PT-2025-40126

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc5 mlnx Description A flaw exists in the net/mlx5 component of the Linux kernel related to delayed bond work cancellation. A missing call to cancel delayed work could lead to the execution of code on an...

PT-2025-40130

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.0.0-rc6+ through 6.0.0-rc6+ Description The Linux kernel contains a flaw related to the handling of transport-mode packets within the xfrm framework. Specifically, the issue involves the potential for reinjection of the...

SUSE CVE-2023-53329

In the Linux kernel, the following vulnerability has been resolved: workqueue: fix data race with the pwq-stats increment KCSAN has discovered a data race in kernel/workqueue.c:2598: 1863.554079 ================================================================== 1863.554118 BUG: KCSAN: data-race i...

SUSE CVE-2024-56599

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: avoid NULL pointer error during sdio remove When running 'rmmod ath10k', ath10ksdioremove will free sdio workqueue by destroyworkqueue. But if CONFIGINITONFREEDEFAULTON is set to yes, kernel panic will happen: Call...

Linux Distros Unpatched Vulnerability : CVE-2023-53289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: bdisp: Add missing check for createworkqueue Add the check for the return value of the createworkqueue in order to avoid NULL pointer dereference...

Linux Distros Unpatched Vulnerability : CVE-2022-50369

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vkms: Fix null-ptr-deref in vkmsrelease A null-ptr-deref is triggered when it tries to destroy the workqueue in vkms-output.composerworkq in vkmsrelease...

SUSE CVE-2023-53223

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Add missing check for allocorderedworkqueue Add check for the return value of allocorderedworkqueue as it may return NULL pointer and cause NULL pointer dereference. Patchwork:...

SUSE CVE-2022-50369

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix null-ptr-deref in vkmsrelease A null-ptr-deref is triggered when it tries to destroy the workqueue in vkms-output.composerworkq in vkmsrelease. KASAN: null-ptr-deref in range 0x0000000000000118-0x000000000000011f CP...

SUSE CVE-2022-50415

In the Linux kernel, the following vulnerability has been resolved: parisc: led: Fix potential null-ptr-deref in starttask starttask calls createsinglethreadworkqueue and not checked the ret value, which may return NULL. And a null-ptr-deref may happen: starttask createsinglethreadworkqueue faile...

CVE-2022-50415

In the Linux kernel, the following vulnerability has been resolved: parisc: led: Fix potential null-ptr-deref in starttask starttask calls createsinglethreadworkqueue and not checked the ret value, which may return NULL. And a null-ptr-deref may happen: starttask createsinglethreadworkqueue faile...

DEBIAN-CVE-2022-50415

In the Linux kernel, the following vulnerability has been resolved: parisc: led: Fix potential null-ptr-deref in starttask starttask calls createsinglethreadworkqueue and not checked the ret value, which may return NULL. And a null-ptr-deref may happen: starttask createsinglethreadworkqueue faile...

CVE-2022-50415

In the Linux kernel, the following vulnerability has been resolved: parisc: led: Fix potential null-ptr-deref in starttask starttask calls createsinglethreadworkqueue and not checked the ret value, which may return NULL. And a null-ptr-deref may happen: starttask createsinglethreadworkqueue faile...

UBUNTU-CVE-2022-50415

In the Linux kernel, the following vulnerability has been resolved: parisc: led: Fix potential null-ptr-deref in starttask starttask calls createsinglethreadworkqueue and not checked the ret value, which may return NULL. And a null-ptr-deref may happen: starttask createsinglethreadworkqueue faile...