Lucene search

K
LinuxLinux Kernel4.20

7 matches found

CVE
CVE
added 2025/01/06 5:15 p.m.171 views

CVE-2024-56767

In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset The at_xdmac_memset_create_desc may return NULL, which will lead to anull pointer dereference. For example, the len input is error, or theatchan->free_descs_l...

5.5CVSS6.5AI score0.00038EPSS
CVE
CVE
added 2025/03/12 10:15 a.m.156 views

CVE-2025-21858

In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). syzkaller reported a use-after-free in geneve_find_dev() [0]without repro. geneve_configure() links struct geneve_dev.next tonet_generic(net, geneve_net_id)->geneve_list. The net ...

7.8CVSS6.6AI score0.00032EPSS
CVE
CVE
added 2025/02/26 7:1 a.m.151 views

CVE-2022-49371

In the Linux kernel, the following vulnerability has been resolved: driver core: fix deadlock in __device_attach In __device_attach function, The lock holding logic is as follows:...__device_attachdevice_lock(dev) // get lock devasync_schedule_dev(__device_attach_async_helper, dev); // funcasync_sc...

5.5CVSS5.6AI score0.00019EPSS
CVE
CVE
added 2025/02/26 7:1 a.m.124 views

CVE-2022-49630

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_ecn_fallback. While reading sysctl_tcp_ecn_fallback, it can be changed concurrently.Thus, we need to add READ_ONCE() to its reader.

4.7CVSS6.5AI score0.00017EPSS
CVE
CVE
added 2025/02/26 7:1 a.m.116 views

CVE-2022-49626

In the Linux kernel, the following vulnerability has been resolved: sfc: fix use after free when disabling sriov Use after free is detected by kfence when disabling sriov. What was readafter being freed was vf->pci_dev: it was freed from pci_disable_sriovand later read in efx_ef10_sriov_free_vf_...

7.8CVSS5.4AI score0.00025EPSS
CVE
CVE
added 2025/02/26 7:1 a.m.93 views

CVE-2022-49375

In the Linux kernel, the following vulnerability has been resolved: rtc: mt6397: check return value after calling platform_get_resource() It will cause null-ptr-deref if platform_get_resource() returns NULL,we need check the return value.

5.5CVSS6.6AI score0.00023EPSS
CVE
CVE
added 2025/02/26 7:1 a.m.82 views

CVE-2022-49514

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe Call of_node_put(platform_node) to avoid refcount leak inthe error path.

5.5CVSS5.3AI score0.00023EPSS