kernel

Vulnerabilities (1,755)

• CVE-2022-50782Dec 24, 2025
  affected >= 3.10.0, < 4.19.270fixed 4.19.270

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in __es_tree_search caused by bad quota inode We got a issue as fllows: ================================================================== kernel BUG at fs/ext4/extents_status.c:202! invalid

• CVE-2022-50781Dec 24, 2025
  affected >= 4.20.0, < 5.4.229fixed 5.4.229

  In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() In the PP_OD_EDIT_VDDC_CURVE case the "input_index" variable is capped at 2 but not checked for negative values so it results in an out of bound

• CVE-2022-50780Dec 24, 2025
  affected >= 2.6.33, < 4.19.264fixed 4.19.264

  In the Linux kernel, the following vulnerability has been resolved: net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed When the ops_init() interface is invoked to initialize the net, but ops->init() fails, data is released. However, the ptr pointer in net->gen is

• CVE-2022-50779Dec 24, 2025
  affected >= 4.9.0, < 4.9.337fixed 4.9.337

  In the Linux kernel, the following vulnerability has been resolved: orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() When insert and remove the orangefs module, then debug_help_string will be leaked: unreferenced object 0xffff8881652ba000 (size 4096): com

• CVE-2022-50778Dec 24, 2025
  affected >= 5.16.0, < 5.19.17fixed 5.19.17

  In the Linux kernel, the following vulnerability has been resolved: fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCAL With CONFIG_FORTIFY=y and CONFIG_UBSAN_LOCAL_BOUNDS=y enabled, we observe a runtime panic while running Android's Compatibility Test Suite's (CTS) an

• CVE-2022-50777Dec 24, 2025
  affected < 4.14.303fixed 4.14.303

  In the Linux kernel, the following vulnerability has been resolved: net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe of_phy_find_device() return device node with refcount incremented. Call put_device() to relese it when not needed anymore.

• CVE-2022-50776Dec 24, 2025
  affected >= 3.15.0, < 4.9.337fixed 4.9.337

  In the Linux kernel, the following vulnerability has been resolved: clk: st: Fix memory leak in st_of_quadfs_setup() If st_clk_register_quadfs_pll() fails, @lock should be freed before goto @err_exit, otherwise will cause meory leak issue, fix it.

• CVE-2022-50775Dec 24, 2025
  affected >= 5.17.0, < 6.1.16fixed 6.1.16

  In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix refcount leak in hns_roce_mmap rdma_user_mmap_entry_get_pgoff() takes the reference. Add missing rdma_user_mmap_entry_put() to release the reference. Acked-by Haoyue Xu <xuhaoyue1@hisilicon.com>

• CVE-2022-50774Dec 24, 2025
  affected >= 3.17.0, < 5.10.150fixed 5.10.150

  In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix DMA transfer direction When CONFIG_DMA_API_DEBUG is selected, while running the crypto self test on the QAT crypto algorithms, the function add_dma_entry() reports a warning similar to the one

• CVE-2022-50773Dec 24, 2025
  affected >= 2.6.19, < 4.9.337fixed 4.9.337

  In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt I got a null-ptr-defer error report when I do the following tests on the qemu platform: make defconfig and CONFIG_PARPORT=m, CONFIG_PARPORT_PC=m,

• CVE-2022-50772Dec 24, 2025
  affected >= 5.2.0, < 6.0.7fixed 6.0.7

  In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsim_bus_dev_new() If device_register() failed in nsim_bus_dev_new(), the value of reference in nsim_bus_dev->dev is 1. obj->name in nsim_bus_dev->dev will not be released. unrefe

• CVE-2022-50771Dec 24, 2025
  affected >= 3.17.0, < 5.4.229fixed 5.4.229

  In the Linux kernel, the following vulnerability has been resolved: rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() Running rcutorture with non-zero fqs_duration module parameter in a kernel built with CONFIG_PREEMPTION=y results in the following splat

• CVE-2022-50770Dec 24, 2025
  affected >= 2.6.30, < 5.4.229fixed 5.4.229

  In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix memory leak in ocfs2_mount_volume() There is a memory leak reported by kmemleak: unreferenced object 0xffff88810cc65e60 (size 32): comm "mount.ocfs2", pid 23753, jiffies 4302528942 (age 34735.

• CVE-2022-50769Dec 24, 2025
  affected >= 2.6.29, < 4.9.337fixed 4.9.337

  In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash

• CVE-2022-50768Dec 24, 2025
  affected >= 6.0.0, < 6.0.16fixed 6.0.16

  In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Correct device removal for multi-actuator devices Correct device count for multi-actuator drives which can cause kernel panics.

• CVE-2022-50767Dec 24, 2025
  affected >= 3.2.0, < 4.9.332fixed 4.9.332

  In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: Fix several use-after-free bugs Several types of UAFs can occur when physically removing a USB device. Adds ufx_ops_destroy() function to .fb_destroy of fb_ops, and in this function, there is k

• CVE-2022-50766Dec 24, 2025
  affected >= 4.19.0, < 5.15.75fixed 5.15.75

  In the Linux kernel, the following vulnerability has been resolved: btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer syzbot is reporting uninit-value in btrfs_clean_tree_block() [1], for commit bc877d285ca3dba2 ("btrfs: Deduplicate extent_buf

• CVE-2022-50765Dec 24, 2025
  affected >= 5.19.0, < 6.0.18fixed 6.0.18

  In the Linux kernel, the following vulnerability has been resolved: RISC-V: kexec: Fix memory leak of elf header buffer This is reported by kmemleak detector: unreferenced object 0xff2000000403d000 (size 4096): comm "kexec", pid 146, jiffies 4294900633 (age 64.792s) hex du

• CVE-2022-50764Dec 24, 2025
  affected >= 2.6.37, < 5.15.86fixed 5.15.86

  In the Linux kernel, the following vulnerability has been resolved: ipv6/sit: use DEV_STATS_INC() to avoid data-races syzbot/KCSAN reported that multiple cpus are updating dev->stats.tx_error concurrently. This is because sit tunnels are NETIF_F_LLTX, meaning their ndo_start_x

• CVE-2022-50763Dec 24, 2025
  affected >= 5.7.0, < 5.10.150fixed 5.10.150

  In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/octeontx - prevent integer overflows The "code_length" value comes from the firmware file. If your firmware is untrusted realistically there is probably very little you can do to protect yourse