CVE-2022-49636

CVE-2022-49636 affects the Linux kernel VLAN code, specifically a memory leak in vlan_newlink/vlan_changelink paths. The issue arises when a memory allocation fails in vlan_changelink() after prior allocations succeed; memory allocated for egress priority/vlan_dev structures may remain referenced...

CVE-2024-50101

CVE-2024-50101 occurs in the Linux kernel iommu/vt-d code where domain_context_clear() incorrectly called pci_for_each_dma_alias() for non‑PCI devices, potentially causing kernel hangs. The fix adds a check to only call pci_for_each_dma_alias() for PCI devices and calls domain_context_clear_one()...