Summary
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und um nicht nähere beschriebene Effekte zu verursachen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 138
-
Critical 9.8
tipc: do not update mtu if msg_max is too small in mtu negotiation
In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msg_max is too small in mtu negotiation When doing link mtu negotiation, a malicious peer may send Activate msg with a very small mtu, e.g. 4 in Shuang's testing, w…
-
High 8.8
HID: multitouch: Correct devm device reference for hidinput input_dev name
In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Correct devm device reference for hidinput input_dev name Reference the HID device rather than the input device for the devm allocation of the input_dev name. Referencing the…
-
High 8.4
fs/ntfs3: Validate buffer length while parsing index
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate buffer length while parsing index indx_read is called when we have some NTFS directory operations that need more information from the index buffers. This adds a sanity chec…
-
High 8.4
accel/qaic: tighten bounds checking in decode_message()
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: tighten bounds checking in decode_message() Copy the bounds checking from encode_message() to decode_message(). This patch addresses the following concerns. Ensure that there is e…
-
High 7.8
rpmsg: char: Avoid double destroy of default endpoint
In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Avoid double destroy of default endpoint The rpmsg_dev_remove() in rpmsg_core is the place for releasing this default endpoint. So need to avoid destroying the default endpoint i…
-
High 7.8
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() When executing SMP task failed, the smp_execute_task_sg() calls del_timer() to delete "slow_task->timer". However, if the timer h…
-
High 7.8
ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() There is an use-after-free reported by KASAN: BUG: KASAN: use-after-free in acpi_ut_remove_reference+0x3b/0x82 Read of size 1…
-
High 7.8
kernfs: fix use-after-free in __kernfs_remove
In the Linux kernel, the following vulnerability has been resolved: kernfs: fix use-after-free in __kernfs_remove Syzkaller managed to trigger concurrent calls to kernfs_remove_by_name_ns() for the same file resulting in a KASAN detected use-after-free. The r…
-
High 7.8
drm/msm/hdmi: fix memory corruption with too many bridges
In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are eve…
-
High 7.8
drm/vmwgfx: Validate the box size for the snooped cursor
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate the box size for the snooped cursor Invalid userspace dma surface copies could potentially overflow the memcpy from the surface to the snooped image leading to crashes. T…
-
High 7.8
drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() nouveau_bo_init() is backed by ttm_bo_init() and ferries its return code back to the caller. On failures, ttm will cal…
-
High 7.8
scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() Fix a NULL pointer crash that occurs when we are freeing the socket at the same time we access it via sysfs. The problem…
-
High 7.8
Linux: buffer overrun in netback due to unusual packet
The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire…
-
High 7.8
soundwire: qcom: fix storing port config out-of-bounds
In the Linux kernel, the following vulnerability has been resolved: soundwire: qcom: fix storing port config out-of-bounds The 'qcom_swrm_ctrl->pconfig' has size of QCOM_SDW_MAX_PORTS (14), however we index it starting from 1, not 0, to match real port number…
-
High 7.8
ext4: improve error handling from ext4_dirhash()
In the Linux kernel, the following vulnerability has been resolved: ext4: improve error handling from ext4_dirhash() The ext4_dirhash() will *almost* never fail, especially when the hash tree feature was first introduced. However, with the addition of support…
-
High 7.8
x86/MCE/AMD: Use an u64 for bank_map
In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Use an u64 for bank_map Thee maximum number of MCA banks is 64 (MAX_NR_BANKS), see a0bc32b3cacf ("x86/mce: Increase maximum number of banks to 64"). However, the bank_map which c…
-
High 7.8
tracing/synthetic: Fix races on freeing last_cmd
In the Linux kernel, the following vulnerability has been resolved: tracing/synthetic: Fix races on freeing last_cmd Currently, the "last_cmd" variable can be accessed by multiple processes asynchronously when multiple users manipulate synthetic_events node a…
-
High 7.8
ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
In the Linux kernel, the following vulnerability has been resolved: ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed Following process will trigger an infinite loop in ubi_wl_put_peb(): ubifs_bgt ubi_bgt ubifs_leb_unmap ubi_leb_unmap ubi_…
-
High 7.8
lib: cpu_rmap: Avoid use after free on rmap->obj array entries
In the Linux kernel, the following vulnerability has been resolved: lib: cpu_rmap: Avoid use after free on rmap->obj array entries When calling irq_set_affinity_notifier() with NULL at the notify argument, it will cause freeing of the glue pointer in the corr…
-
High 7.8
fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
In the Linux kernel, the following vulnerability has been resolved: fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev Syzkaller reported the following issue: UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:1965:6 index -84 is out of range …
-
High 7.8
fs/ntfs3: Enhance the attribute size check
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Enhance the attribute size check This combines the overflow and boundary check so that all attribute size will be properly examined while enumerating them. [ 169.181521] BUG: KASAN:…
-
High 7.8
mptcp: fix disconnect vs accept race
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix disconnect vs accept race Despite commit 0ad529d9fd2b ("mptcp: fix possible divide by zero in recvmsg()"), the mptcp protocol is still prone to a race between disconnect() (or shut…
-
High 7.8
netfilter: nf_tables: do not ignore genmask when looking up chain by id
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not ignore genmask when looking up chain by id When adding a rule to a chain referring to its ID, if that chain had been deleted on the same batch, the rule might end…
-
High 7.8
crypto: xts - Handle EBUSY correctly
In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request. However, …
-
High 7.8
net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() rules is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt need…
-
High 7.8
RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF ib_dealloc_device() should be called only after device cleanup. Fix the dealloc sequence.
-
High 7.8
udf: Do not bother merging very long extents
In the Linux kernel, the following vulnerability has been resolved: udf: Do not bother merging very long extents When merging very long extents we try to push as much length as possible to the first extent. However this is unnecessarily complicated and not re…
-
High 7.8
scsi: ufs: core: Fix handling of lrbp->cmd
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp->cmd ufshcd_queuecommand() may be called two times in a row for a SCSI command before it is completed. Hence make the following changes: - In the functio…
-
High 7.8
PM / devfreq: Fix leak in devfreq_dev_release()
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix leak in devfreq_dev_release() srcu_init_notifier_head() allocates resources that need to be released with a srcu_cleanup_notifier_head() call. Reported by kmemleak.
-
High 7.8
Bluetooth: Fix hci_suspend_sync crash
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix hci_suspend_sync crash If hci_unregister_dev() frees the hci_dev object but hci_suspend_notifier may still be accessing it, it can cause the program to crash. Here's the call t…
-
High 7.8
jbd2: check 'jh->b_transaction' before removing it from checkpoint
In the Linux kernel, the following vulnerability has been resolved: jbd2: check 'jh->b_transaction' before removing it from checkpoint Following process will corrupt ext4 image: Step 1: jbd2_journal_commit_transaction __jbd2_journal_insert_checkpoint(jh, comm…
-
High 7.8
null_blk: fix poll request timeout handling
In the Linux kernel, the following vulnerability has been resolved: null_blk: fix poll request timeout handling When doing io_uring benchmark on /dev/nullb0, it's easy to crash the kernel if poll requests timeout triggered, as reported by David. [1] BUG: kern…
-
High 7.5
ibmvnic: Do not reset dql stats on NON_FATAL err
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Do not reset dql stats on NON_FATAL err All ibmvnic resets, make a call to netdev_tx_reset_queue() when re-opening the device. netdev_tx_reset_queue() resets the num_queued and num_c…
-
High 7.5
start_kernel: Add __no_stack_protector function attribute
In the Linux kernel, the following vulnerability has been resolved: start_kernel: Add __no_stack_protector function attribute Back during the discussion of commit a9a3ed1eff36 ("x86: Fix early boot crash on gcc-10, third try") we discussed the need for a func…
-
High 7.3
xfrm: fix slab-use-after-free in decode_session6
In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 When the xfrm device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-…
-
High 7.1
drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning If get_num_sdma_queues or get_num_xgmi_sdma_queues is 0, we end up doing a shift operation where the number of bits shifted equals number of …
-
High 7.1
hsr: Fix uninit-value access in fill_frame_info()
In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in fill_frame_info() Syzbot reports the following uninit-value access problem. ===================================================== BUG: KMSAN: uninit-value in f…
-
High 7.0
virtio_net: Fix error unwinding of XDP initialization
In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix error unwinding of XDP initialization When initializing XDP in virtnet_open(), some rq xdp initialization may hit an error causing net device open failed. However, previous rq…
-
Medium 5.5
crypto: hisilicon/hpre - fix resource leak in remove process
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/hpre - fix resource leak in remove process In hpre_remove(), when the disable operation of qm sriov failed, the following logic should continue to be executed to release the…
-
Medium 5.5
wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability()
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability() Fixed coverity issue with resource leaks at variable "fw" going out of scope leaks the storage it points to mt7921_chec…
-
Medium 5.5
Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, lea…
-
Unscored —
x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly When an extended state component is not present in fpstate, but in init state, the function copies from init_fpstate via copy_…
-
Unscored —
remoteproc: imx_dsp_rproc: Add mutex protection for workqueue
In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_dsp_rproc: Add mutex protection for workqueue The workqueue may execute late even after remoteproc is stopped or stopping, some resources (rpmsg device and endpoint) have been…
-
Unscored —
ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()
In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() If device_register() fails in snd_ac97_dev_register(), it should call put_device() to give up reference, or the name allocated …
-
Unscored —
ext4: fix off-by-one errors in fast-commit block filling
In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one errors in fast-commit block filling Due to several different off-by-one errors, or perhaps due to a late change in design that wasn't fully reflected in the code that was…
-
Unscored —
memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() We should add the of_node_put() when breaking out of for_each_child_of_node() as it will automatically increase and decrease t…
-
Unscored —
mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING vub300_enable_sdio_irq() works with mutex and need TASK_RUNNING here. Ensure that we mark current as TASK_RUNNING for sl…
-
Unscored —
ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()
In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() dev_set_name() in soundbus_add_one() allocates memory for name, it need be freed when of_device_register() fails, call soundbus…
-
Unscored —
efi: ssdt: Don't free memory if ACPI table was loaded successfully
In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: Don't free memory if ACPI table was loaded successfully Amadeusz reports KASAN use-after-free errors introduced by commit 3881ee0b1edc ("efi: avoid efivars layer when loading SSDTs…
-
Unscored —
blk-mq: fix possible memleak when register 'hctx' failed
In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix possible memleak when register 'hctx' failed There's issue as follows when do fault injection test: unreferenced object 0xffff888132a9f400 (size 512): comm "insmod", pid 308021, j…
-
Unscored —
ext4: avoid crash when inline data creation follows DIO write
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid crash when inline data creation follows DIO write When inode is created and written to using direct IO, there is nothing to clear the EXT4_STATE_MAY_INLINE_DATA flag. Thus when in…
-
Unscored —
ext4: don't set up encryption key during jbd2 transaction
In the Linux kernel, the following vulnerability has been resolved: ext4: don't set up encryption key during jbd2 transaction Commit a80f7fcf1867 ("ext4: fixup ext4_fc_track_* functions' signature") extended the scope of the transaction in ext4_unlink() too f…
-
Unscored —
net: hinic: fix memory leak when reading function table
In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function table When the input parameter idx meets the expected case option in hinic_dbg_get_func_table(), read_data is not released. Fix it.
-
Unscored —
ASoC: mediatek: mt8173: Enable IRQ when pdata is ready
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8173: Enable IRQ when pdata is ready If the device does not come straight from reset, we might receive an IRQ before we are ready to handle it. [ 2.334737] Unable to handle …
-
Unscored —
net/mlx5: Lag, fix failure to cancel delayed bond work
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Lag, fix failure to cancel delayed bond work Commit 0d4e8ed139d8 ("net/mlx5: Lag, avoid lockdep warnings") accidentally removed a call to cancel delayed bond work thus it may cause …
-
Unscored —
drm/rockchip: lvds: fix PM usage counter unbalance in poweron
In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: lvds: fix PM usage counter unbalance in poweron pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to putting operation will result in reference leak…
-
Unscored —
clk: tegra20: Fix refcount leak in tegra20_clock_init
In the Linux kernel, the following vulnerability has been resolved: clk: tegra20: Fix refcount leak in tegra20_clock_init of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add mi…
-
Unscored —
xfrm: Reinject transport-mode packets through workqueue
In the Linux kernel, the following vulnerability has been resolved: xfrm: Reinject transport-mode packets through workqueue The following warning is displayed when the tcp6-multi-diffip11 stress test case of the LTP test suite is tested: watchdog: BUG: soft l…
-
Unscored —
ARC: mm: fix leakage of memory allocated for PTE
In the Linux kernel, the following vulnerability has been resolved: ARC: mm: fix leakage of memory allocated for PTE Since commit d9820ff ("ARC: mm: switch pgtable_t back to struct page *") a memory leakage problem occurs. Memory allocated for page table entr…
-
Unscored —
Bluetooth: hci_conn: Fix crash on hci_create_cis_sync
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix crash on hci_create_cis_sync When attempting to connect multiple ISO sockets without using DEFER_SETUP may result in the following crash: BUG: KASAN: null-ptr-deref i…
-
Unscored —
mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in
In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in When PTE_MARKER_UFFD_WP not configured, it's still possible to reach pte marker code and trigger an warning. Add a few CONFIG_PTE_M…
-
Unscored —
clk: samsung: Fix memory leak in _samsung_clk_register_pll()
In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix memory leak in _samsung_clk_register_pll() If clk_register() fails, @pll->rate_table may have allocated memory by kmemdup(), so it needs to be freed, otherwise will cause me…
-
Unscored —CVE-2022-50450 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix memory leak on ntfs_fill_super() error path syzbot reported kmemleak as below: BUG: memory leak unreferenced object 0xffff8880122f1540 (size 32): comm "a.out", pid 6664, jiffies…
-
Unscored —
net: sched: cake: fix null pointer access issue when cake_init() fails
In the Linux kernel, the following vulnerability has been resolved: net: sched: cake: fix null pointer access issue when cake_init() fails When the default qdisc is cake, if the qdisc of dev_queue fails to be inited during mqprio_init(), cake_reset() is invok…
-
Unscored —
gpiolib: cdev: fix NULL-pointer dereferences
In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix NULL-pointer dereferences There are several places where we can crash the kernel by requesting lines, unbinding the GPIO device, then calling any of the system calls releva…
-
Unscored —CVE-2022-50455 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
btrfs: fix resolving backrefs for inline extent followed by prealloc
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix resolving backrefs for inline extent followed by prealloc If a file consists of an inline extent followed by a regular or prealloc extent, then a legitimate attempt to resolve a lo…
-
Unscored —
mtd: core: Fix refcount error in del_mtd_device()
In the Linux kernel, the following vulnerability has been resolved: mtd: core: Fix refcount error in del_mtd_device() del_mtd_device() will call of_node_put() to mtd_get_of_node(mtd), which is mtd->dev.of_node. However, memset(&mtd->dev, 0) is called before o…
-
Unscored —
clk: tegra: Fix refcount leak in tegra210_clock_init
In the Linux kernel, the following vulnerability has been resolved: clk: tegra: Fix refcount leak in tegra210_clock_init of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add mis…
-
Unscored —
cifs: Fix xid leak in cifs_flock()
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_flock() If not flock, before return -ENOLCK, should free the xid, otherwise, the xid will be leaked.
-
Unscored —
net: ethernet: ti: am65-cpsw: Fix PM runtime leakage in am65_cpsw_nuss_ndo_slave_open()
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix PM runtime leakage in am65_cpsw_nuss_ndo_slave_open() Ensure pm_runtime_put() is issued in error path.
-
Unscored —
MIPS: vpe-mt: fix possible memory leak while module exiting
In the Linux kernel, the following vulnerability has been resolved: MIPS: vpe-mt: fix possible memory leak while module exiting Afer commit 1fa5ae857bb1 ("driver core: get rid of struct device's bus_id string array"), the name of device is allocated dynamical…
-
Unscored —
powerpc/52xx: Fix a resource leak in an error handling path
In the Linux kernel, the following vulnerability has been resolved: powerpc/52xx: Fix a resource leak in an error handling path The error handling path of mpc52xx_lpbfifo_probe() has a request_irq() that is not balanced by a corresponding free_irq(). Add the …
-
Unscored —
mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2()
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() As comment of pci_get_device() says, it returns a pci_device with its refcount increased. We need to call pci_dev_put() to…
-
Unscored —
ext4: fix leaking uninitialized memory in fast-commit journal
In the Linux kernel, the following vulnerability has been resolved: ext4: fix leaking uninitialized memory in fast-commit journal When space at the end of fast-commit journal blocks is unused, make sure to zero it out so that uninitialized memory is not leake…
-
Unscored —
fs/binfmt_elf: Fix memory leak in load_elf_binary()
In the Linux kernel, the following vulnerability has been resolved: fs/binfmt_elf: Fix memory leak in load_elf_binary() There is a memory leak reported by kmemleak: unreferenced object 0xffff88817104ef80 (size 224): comm "xfs_admin", pid 47165, jiffies 429870…
-
Unscored —
scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID An error case exit from lpfc_cmpl_ct_cmd_gft_id() results in a call to lpfc_nlp_put() with a null pointer to a nodel…
-
Unscored —
platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init()
In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_usbpd_notify: Fix error handling in cros_usbpd_notify_init() The following WARNING message was given when rmmod cros_usbpd_notify: Unexpected driver unregister! WARNING:…
-
Unscored —
staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw()
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() In rtw_init_drv_sw(), there are various init functions are called to populate the padapter structure and some checks for the…
-
Unscored —
fbdev: imxfb: Removed unneeded release_mem_region
In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Removed unneeded release_mem_region Remove unnecessary release_mem_region from the error path to prevent mem region from being released twice, which could avoid resource leak or…
-
Unscored —
s390/dasd: Fix potential memleak in dasd_eckd_init()
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential memleak in dasd_eckd_init() `dasd_reserve_req` is allocated before `dasd_vol_info_req`, and it also needs to be freed before the error returns, just like the other ca…
-
Unscored —
ext4: remove a BUG_ON in ext4_mb_release_group_pa()
In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the s_first_data_block is set to a very large number, th…
-
Unscored —
scsi: qla2xxx: Fix potential NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix potential NULL pointer dereference Klocwork tool reported 'cur_dsd' may be dereferenced. Add fix to validate pointer before dereferencing the pointer.
-
Unscored —
wifi: rtw89: fix potential race condition between napi_init and napi_enable
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential race condition between napi_init and napi_enable A race condition can happen if netdev is registered, but NAPI isn't initialized yet, and meanwhile user space start…
-
Unscored —
drm/radeon: free iio for atombios when driver shutdown
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: free iio for atombios when driver shutdown Fix below kmemleak when unload radeon driver: unreferenced object 0xffff9f8608ede200 (size 512): comm "systemd-udevd", pid 326, jiffies …
-
Unscored —
drm/vc4: drop all currently held locks if deadlock happens
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drop all currently held locks if deadlock happens If vc4_hdmi_reset_link() returns -EDEADLK, it means that a deadlock happened in the locking context. This situation should be addres…
-
Unscored —
scsi: qla4xxx: Add length check when parsing nlattrs
In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Add length check when parsing nlattrs There are three places that qla4xxx parses nlattrs: - qla4xxx_set_chap_entry() - qla4xxx_iface_set_param() - qla4xxx_sysfs_ddb_set_param()…
-
Unscored —
FS: JFS: Fix null-ptr-deref Read in txBegin
In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Fix null-ptr-deref Read in txBegin Syzkaller reported an issue where txBegin may be called on a superblock in a read-only mounted filesystem which leads to NULL pointer deref. This c…
-
Unscored —
media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish()
In the Linux kernel, the following vulnerability has been resolved: media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() When the driver calls cx23885_risc_buffer() to prepare the buffer, the function call dma_alloc_coherent may fa…
-
Unscored —
HID: mcp-2221: prevent UAF in delayed work
In the Linux kernel, the following vulnerability has been resolved: HID: mcp-2221: prevent UAF in delayed work If the device is plugged/unplugged without giving time for mcp_init_work() to complete, we might kick in the devm free code path and thus have unava…
-
Unscored —
wifi: rtw88: fix memory leak in rtw_usb_probe()
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix memory leak in rtw_usb_probe() drivers/net/wireless/realtek/rtw88/usb.c:876 rtw_usb_probe() warn: 'hw' from ieee80211_alloc_hw() not released on lines: 811 Fix this by modify…
-
Unscored —
io_uring: wait interruptibly for request completions on exit
In the Linux kernel, the following vulnerability has been resolved: io_uring: wait interruptibly for request completions on exit WHen the ring exits, cleanup is done and the final cancelation and waiting on completions is done by io_ring_exit_work. That funct…
-
Unscored —
scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
In the Linux kernel, the following vulnerability has been resolved: scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() The validity of sock should be checked before assignment to avoid incorrect values. Commit 57569c37f0ad ("scsi: iscsi: iscsi…
-
Unscored —
wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit Always purge mcu skb queues in mt7915_mcu_exit routine even if mt7915_firmware_state fails.
-
Unscored —
wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie()
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie() Do `kfree_skb(new)` before `goto out` to prevent potential leak.
-
Unscored —
ubifs: Fix memory leak in alloc_wbufs()
In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in alloc_wbufs() kmemleak reported a sequence of memory leaks, and show them as following: unreferenced object 0xffff8881575f8400 (size 1024): comm "mount", pid 19625, …
-
Unscored —CVE-2023-53469 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
ionic: catch failure from devlink_alloc
In the Linux kernel, the following vulnerability has been resolved: ionic: catch failure from devlink_alloc Add a check for NULL on the alloc return. If devlink_alloc() fails and we try to use devlink_priv() on the NULL return, the kernel gets very unhappy an…
-
Unscored —
drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras gfx9 cp_ecc_error_irq is only enabled when legacy gfx ras is assert. So in gfx_v9_0_hw_fini, interrupt disablem…
-
Unscored —
pwm: lpc32xx: Remove handling of PWM channels
In the Linux kernel, the following vulnerability has been resolved: pwm: lpc32xx: Remove handling of PWM channels Because LPC32xx PWM controllers have only a single output which is registered as the only PWM device/channel per controller, it is known in advan…
-
Unscored —
usb: xhci: tegra: fix sleep in atomic call
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: tegra: fix sleep in atomic call When we set the dual-role port to Host mode, we observed the following splat: [ 167.057718] BUG: sleeping function called from invalid context at in…
-
Unscored —
iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()
In the Linux kernel, the following vulnerability has been resolved: iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() This condition needs to match the previous "if (epcp->state == LISTEN) {" exactly to avoid a NULL dereference of either…
-
Unscored —
ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
In the Linux kernel, the following vulnerability has been resolved: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation In function rt6_nlmsg_size(), the length of nexthop is calculated by multipling the nexthop length of fib6_info and the nu…
-
Unscored —
cxl/acpi: Fix a use-after-free in cxl_parse_cfmws()
In the Linux kernel, the following vulnerability has been resolved: cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() KASAN and KFENCE detected an user-after-free in the CXL driver. This happens in the cxl_decoder_add() fail path. KASAN prints the following…
-
Unscored —
kobject: Add sanity check for kset->kobj.ktype in kset_register()
In the Linux kernel, the following vulnerability has been resolved: kobject: Add sanity check for kset->kobj.ktype in kset_register() When I register a kset in the following way: static struct kset my_kset; kobject_set_name(&my_kset.kobj, "my_kset"); ret = ks…
-
Unscored —
iommu: Fix error unwind in iommu_group_alloc()
In the Linux kernel, the following vulnerability has been resolved: iommu: Fix error unwind in iommu_group_alloc() If either iommu_group_grate_file() fails then the iommu_group is leaked. Destroy it on these error paths. Found by kselftest/iommu/iommufd_fail_…
-
Unscored —
ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup()
In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() devm_kzalloc() may fail, clk_data->name might be NULL and will cause a NULL pointer dereference later. [ rjw: Subj…
-
Unscored —
powerpc/rtas_flash: allow user copy to flash block cache objects
In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas_flash: allow user copy to flash block cache objects With hardened usercopy enabled (CONFIG_HARDENED_USERCOPY=y), using the /proc/powerpc/rtas/firmware_update interface to prepare…
-
Unscored —
IB/hfi1: Fix possible panic during hotplug remove
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is possible that the update counters work might be pending, and may run after memory has been freed. Cancel the upda…
-
Unscored —
tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
In the Linux kernel, the following vulnerability has been resolved: tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. syzkaller reported [0] memory leaks of an UDP socket and ZEROCOPY skbs. We can reproduce the problem with these sequences: sk …
-
Unscored —
x86/platform/uv: Use alternate source for socket to node data
In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Use alternate source for socket to node data The UV code attempts to build a set of tables to allow it to do bidirectional socket<=>node lookups. But when nr_cpus is set to a…
-
Unscored —
media: vsp1: Replace vb2_is_streaming() with vb2_start_streaming_called()
In the Linux kernel, the following vulnerability has been resolved: media: vsp1: Replace vb2_is_streaming() with vb2_start_streaming_called() The vsp1 driver uses the vb2_is_streaming() function in its .buf_queue() handler to check if the .start_streaming() o…
-
Unscored —
drm/amd/display: Fix potential null dereference
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null dereference The adev->dm.dc pointer can be NULL and dereferenced in amdgpu_dm_fini() without checking. Add a NULL pointer check before calling dc_dmub_srv_…
-
Unscored —
iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind
In the Linux kernel, the following vulnerability has been resolved: iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind When unbinding pasid - a race condition exists vs outstanding page faults. To prevent this, the pasid_state obje…
-
Unscored —CVE-2023-53502 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
ext4: allow ext4_get_group_info() to fail
In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4_get_group_info() to fail Previously, ext4_get_group_info() would treat an invalid group number as BUG(), since in theory it should never happen. However, if a malicious attak…
-
Unscored —
clk: tegra: tegra124-emc: Fix potential memory leak
In the Linux kernel, the following vulnerability has been resolved: clk: tegra: tegra124-emc: Fix potential memory leak The tegra and tegra needs to be freed in the error handling path, otherwise it will be leaked.
-
Unscored —
net/mlx5: Unregister devlink params in case interface is down
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Unregister devlink params in case interface is down Currently, in case an interface is down, mlx5 driver doesn't unregister its devlink params, which leads to this WARN[1]. Fix it b…
-
Unscored —
ublk: fail to start device if queue setup is interrupted
In the Linux kernel, the following vulnerability has been resolved: ublk: fail to start device if queue setup is interrupted In ublk_ctrl_start_dev(), if wait_for_completion_interruptible() is interrupted by signal, queues aren't setup successfully yet, so we…
-
Unscored —
qed: allow sleep in qed_mcp_trace_dump()
In the Linux kernel, the following vulnerability has been resolved: qed: allow sleep in qed_mcp_trace_dump() By default, qed_mcp_cmd_and_union() delays 10us at a time in a loop that can run 500K times, so calls to qed_mcp_nvm_rd_cmd() may block the current th…
-
Unscored —
io_uring: fix fget leak when fs don't support nowait buffered read
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix fget leak when fs don't support nowait buffered read Heming reported a BUG when using io_uring doing link-cp on ocfs2. [1] Do the following steps can reproduce this BUG: mount -…
-
Unscored —
scsi: mpt3sas: Fix a memory leak
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix a memory leak Add a forgotten kfree().
-
Unscored —
nbd: fix incomplete validation of ioctl arg
In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbd_ioctl arg without verification. The UBSAN warning calltrace like below: UBSAN: Undefined behaviour in fs…
-
Unscored —
gpu: host1x: Fix memory leak of device names
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix memory leak of device names The device names allocated by dev_set_name() need be freed before module unloading, but they can not be freed because the kobject's refcount which…
-
Unscored —
virtio-mmio: don't break lifecycle of vm_dev
In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: don't break lifecycle of vm_dev vm_dev has a separate lifecycle because it has a 'struct device' embedded. Thus, having a release callback for it is correct. Allocating the vm_de…
-
Unscored —
macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF
In the Linux kernel, the following vulnerability has been resolved: macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF The previous commit 954d1fa1ac93 ("macvlan: Add netlink attribute for broadcast cutoff") added one additional attribute named IFLA…
-
Unscored —
media: v4l2-mem2mem: add lock to protect parameter num_rdy
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter num_rdy Getting below error when using KCSAN to check the driver. Adding lock to protect parameter num_rdy when getting the value with funct…
-
Unscored —
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() A fix for: BUG: KASAN: slab-out-of-bounds in ses_intf_remove+0x23f/0x270 [ses] Read of size 8 at addr ffff88a10d32e5d8 by task rmmod/120…
-
Unscored —
cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex
In the Linux kernel, the following vulnerability has been resolved: cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex syzbot is reporting circular locking dependency between cpu_hotplug_lock and freezer_mutex, for commit f5d39b020809 ("freezer,sched:…
-
Unscored —
can: gs_usb: fix time stamp counter initialization
In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: fix time stamp counter initialization If the gs_usb device driver is unloaded (or unbound) before the interface is shut down, the USB stack first calls the struct usb_driver::dis…
-
Unscored —
wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf An integer overflow occurs in the iwl_write_to_user_buf() function, which is called by the iwl_dbgfs_monitor_data_read() fun…
-
Unscored —
RDMA/cma: Allow UD qp_type to join multicast only
In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qp_type to join multicast only As for multicast: - The SIDR is the only mode that makes sense; - Besides PS_UDP, other port spaces like PS_IB is also allowed, as it is UD c…
-
Unscored —
thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request()
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request() The memory allocated in tb_queue_dp_bandwidth_request() needs to be released once the request is handled to avoid leaking it.
-
Unscored —
RDMA/rxe: Fix unsafe drain work queue code
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix unsafe drain work queue code If create_qp does not fully succeed it is possible for qp cleanup code to attempt to drain the send or recv work queues before the queues have been …
-
Unscored —
wifi: rtw88: Fix memory leak in rtw88_usb
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix memory leak in rtw88_usb Kmemleak shows the following leak arising from routine in the usb probe routine: unreferenced object 0xffff895cb29bba00 (size 512): comm "(udev-worke…
-
Unscored —
scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() The following call trace was observed: localhost kernel: nvme nvme0: NVME-FC{0}: controller connect complete localhost …
-
Unscored —
wifi: ath11k: fix deinitialization of firmware resources
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix deinitialization of firmware resources Currently, in ath11k_ahb_fw_resources_init(), iommu domain mapping is done only for the chipsets having fixed firmware memory. Also, f…
Revision history
-
#49
Neue Updates von Debian aufgenommen
-
#48
Neue Updates von Dell aufgenommen
-
#47
Neue Updates von Ubuntu aufgenommen
-
#46
Neue Updates von Dell und Ubuntu aufgenommen
-
#45
Neue Updates von Ubuntu aufgenommen
-
#44
Neue Updates von Debian aufgenommen
-
#43
Neue Updates von Ubuntu aufgenommen
-
#42
Neue Updates von Ubuntu aufgenommen
-
#41
Neue Updates von Ubuntu aufgenommen
-
#40
Neue Updates von Red Hat aufgenommen
-
#39
Neue Updates von SUSE aufgenommen
-
#38
Neue Updates von SUSE aufgenommen
-
#37
Neue Updates von SUSE aufgenommen
-
#36
Neue Updates von SUSE aufgenommen
-
#35
Neue Updates von Red Hat aufgenommen
-
#34
Neue Updates von SUSE aufgenommen
-
#33
Neue Updates von SUSE aufgenommen
-
#32
Neue Updates von Dell aufgenommen
-
#31
Neue Updates von SUSE aufgenommen
-
#30
Neue Updates von Red Hat aufgenommen
-
#29
Neue Updates von IBM aufgenommen
-
#28
Neue Updates von Red Hat aufgenommen
-
#27
Neue Updates von Debian aufgenommen
-
#26
Neue Updates von SUSE aufgenommen
-
#25
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
References
-
Red Hat Security Advisory RHSA-2025:23424 vom 2025-12-17
https://access.redhat.com/errata/RHSA-2025:23424
-
Red Hat Security Advisory RHSA-2025:23426 vom 2025-12-17
https://access.redhat.com/errata/RHSA-2025:23426
-
Kernel CVE Announce Mailingliste
https://lore.kernel.org/linux-cve-announce/
-
Linux Kernel CVE Announcement CVE-2021-4460
https://lore.kernel.org/linux-cve-announce/2025100114-CVE-2021-4460-aa71@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50420
https://lore.kernel.org/linux-cve-announce/2025100152-CVE-2022-50420-1d36@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50421
https://lore.kernel.org/linux-cve-announce/2025100155-CVE-2022-50421-8bdc@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50422
https://lore.kernel.org/linux-cve-announce/2025100155-CVE-2022-50422-287b@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50423
https://lore.kernel.org/linux-cve-announce/2025100155-CVE-2022-50423-5a66@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50424
https://lore.kernel.org/linux-cve-announce/2025100156-CVE-2022-50424-049f@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50425
https://lore.kernel.org/linux-cve-announce/2025100156-CVE-2022-50425-6722@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50426
https://lore.kernel.org/linux-cve-announce/2025100156-CVE-2022-50426-a61b@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50427
https://lore.kernel.org/linux-cve-announce/2025100157-CVE-2022-50427-87b9@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50428
https://lore.kernel.org/linux-cve-announce/2025100157-CVE-2022-50428-0c76@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50429
https://lore.kernel.org/linux-cve-announce/2025100157-CVE-2022-50429-4bc6@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50430
https://lore.kernel.org/linux-cve-announce/2025100157-CVE-2022-50430-568d@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50431
https://lore.kernel.org/linux-cve-announce/2025100158-CVE-2022-50431-b165@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50432
https://lore.kernel.org/linux-cve-announce/2025100158-CVE-2022-50432-bb35@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50433
https://lore.kernel.org/linux-cve-announce/2025100158-CVE-2022-50433-440b@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50434
https://lore.kernel.org/linux-cve-announce/2025100159-CVE-2022-50434-e4db@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50435
https://lore.kernel.org/linux-cve-announce/2025100159-CVE-2022-50435-f6c4@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50436
https://lore.kernel.org/linux-cve-announce/2025100159-CVE-2022-50436-ad37@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50437
https://lore.kernel.org/linux-cve-announce/2025100100-CVE-2022-50437-440f@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50438
https://lore.kernel.org/linux-cve-announce/2025100100-CVE-2022-50438-1760@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50439
https://lore.kernel.org/linux-cve-announce/2025100100-CVE-2022-50439-6054@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50440
https://lore.kernel.org/linux-cve-announce/2025100101-CVE-2022-50440-1afd@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50441
https://lore.kernel.org/linux-cve-announce/2025100101-CVE-2022-50441-e2e2@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50442
https://lore.kernel.org/linux-cve-announce/2025100101-CVE-2022-50442-c0fe@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50443
https://lore.kernel.org/linux-cve-announce/2025100102-CVE-2022-50443-c1d5@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50444
https://lore.kernel.org/linux-cve-announce/2025100102-CVE-2022-50444-9b11@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50445
https://lore.kernel.org/linux-cve-announce/2025100115-CVE-2022-50445-5873@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50446
https://lore.kernel.org/linux-cve-announce/2025100115-CVE-2022-50446-94be@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50447
https://lore.kernel.org/linux-cve-announce/2025100115-CVE-2022-50447-4de6@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50448
https://lore.kernel.org/linux-cve-announce/2025100116-CVE-2022-50448-922e@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50449
https://lore.kernel.org/linux-cve-announce/2025100116-CVE-2022-50449-214c@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50450
https://lore.kernel.org/linux-cve-announce/2025100116-CVE-2022-50450-7ef7@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50451
https://lore.kernel.org/linux-cve-announce/2025100117-CVE-2022-50451-418f@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50452
https://lore.kernel.org/linux-cve-announce/2025100117-CVE-2022-50452-055d@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50453
https://lore.kernel.org/linux-cve-announce/2025100117-CVE-2022-50453-204a@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50454
https://lore.kernel.org/linux-cve-announce/2025100118-CVE-2022-50454-9c7d@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50455
https://lore.kernel.org/linux-cve-announce/2025100118-CVE-2022-50455-24fb@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50456
https://lore.kernel.org/linux-cve-announce/2025100118-CVE-2022-50456-f0d6@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50457
https://lore.kernel.org/linux-cve-announce/2025100118-CVE-2022-50457-da35@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50458
https://lore.kernel.org/linux-cve-announce/2025100119-CVE-2022-50458-4fa8@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50459
https://lore.kernel.org/linux-cve-announce/2025100119-CVE-2022-50459-2340@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50460
https://lore.kernel.org/linux-cve-announce/2025100119-CVE-2022-50460-2149@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50461
https://lore.kernel.org/linux-cve-announce/2025100120-CVE-2022-50461-5ee8@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50462
https://lore.kernel.org/linux-cve-announce/2025100120-CVE-2022-50462-a935@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50463
https://lore.kernel.org/linux-cve-announce/2025100120-CVE-2022-50463-9ae6@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50464
https://lore.kernel.org/linux-cve-announce/2025100121-CVE-2022-50464-3c96@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50465
https://lore.kernel.org/linux-cve-announce/2025100121-CVE-2022-50465-fb12@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50466
https://lore.kernel.org/linux-cve-announce/2025100121-CVE-2022-50466-b59c@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50467
https://lore.kernel.org/linux-cve-announce/2025100122-CVE-2022-50467-13ec@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50468
https://lore.kernel.org/linux-cve-announce/2025100122-CVE-2022-50468-3196@gregkh/
-
Linux Kernel CVE Announcement CVE-2022-50469
https://lore.kernel.org/linux-cve-announce/2025100122-CVE-2022-50469-bbc4@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53448
https://lore.kernel.org/linux-cve-announce/2025100102-CVE-2023-53448-e125@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53449
https://lore.kernel.org/linux-cve-announce/2025100103-CVE-2023-53449-b49f@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53450
https://lore.kernel.org/linux-cve-announce/2025100103-CVE-2023-53450-35c4@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53451
https://lore.kernel.org/linux-cve-announce/2025100103-CVE-2023-53451-bb02@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53452
https://lore.kernel.org/linux-cve-announce/2025100104-CVE-2023-53452-f6e5@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53453
https://lore.kernel.org/linux-cve-announce/2025100104-CVE-2023-53453-c36d@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53454
https://lore.kernel.org/linux-cve-announce/2025100104-CVE-2023-53454-5ee6@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53455
https://lore.kernel.org/linux-cve-announce/2025100104-CVE-2023-53455-3efb@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53456
https://lore.kernel.org/linux-cve-announce/2025100105-CVE-2023-53456-b77a@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53457
https://lore.kernel.org/linux-cve-announce/2025100105-CVE-2023-53457-629a@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53458
https://lore.kernel.org/linux-cve-announce/2025100105-CVE-2023-53458-8239@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53459
https://lore.kernel.org/linux-cve-announce/2025100106-CVE-2023-53459-48f3@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53460
https://lore.kernel.org/linux-cve-announce/2025100106-CVE-2023-53460-cdc8@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53461
https://lore.kernel.org/linux-cve-announce/2025100106-CVE-2023-53461-b02b@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53462
https://lore.kernel.org/linux-cve-announce/2025100107-CVE-2023-53462-7a33@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53463
https://lore.kernel.org/linux-cve-announce/2025100107-CVE-2023-53463-49fd@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53464
https://lore.kernel.org/linux-cve-announce/2025100107-CVE-2023-53464-a397@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53465
https://lore.kernel.org/linux-cve-announce/2025100108-CVE-2023-53465-eb0b@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53466
https://lore.kernel.org/linux-cve-announce/2025100108-CVE-2023-53466-dcff@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53467
https://lore.kernel.org/linux-cve-announce/2025100108-CVE-2023-53467-fa4b@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53468
https://lore.kernel.org/linux-cve-announce/2025100109-CVE-2023-53468-8dea@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53469
https://lore.kernel.org/linux-cve-announce/2025100109-CVE-2023-53469-e372@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53470
https://lore.kernel.org/linux-cve-announce/2025100109-CVE-2023-53470-8c6a@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53471
https://lore.kernel.org/linux-cve-announce/2025100110-CVE-2023-53471-09f6@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53472
https://lore.kernel.org/linux-cve-announce/2025100110-CVE-2023-53472-93cb@gregkh/
-
Linux Kernel CVE Announcement CVE-2023-53473
https://lore.kernel.org/linux-cve-announce/2025100110-CVE-2023-53473-bf5d@gregkh/