kernel

Vulnerabilities (14,255)

• CVE-2022-49542MedFeb 26, 2025
  affected >= 5.12.0, < 5.15.46fixed 5.15.46

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() In an attempt to log message 0126 with LOG_TRACE_EVENT, the following hard lockup call trace hangs the system. Call Trace: _raw_spin_lock_i

• CVE-2022-49541HigFeb 26, 2025
  affected >= 5.11.0, < 5.15.46fixed 5.15.46

  In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential double free during failed mount RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=2088799

• CVE-2022-49540MedFeb 26, 2025
  affected >= 5.8.0, < 5.10.121fixed 5.10.121

  In the Linux kernel, the following vulnerability has been resolved: rcu-tasks: Fix race in schedule and flush work While booting secondary CPUs, cpus_read_[lock/unlock] is not keeping online cpumask stable. The transient online mask results in below calltrace. [ 0.324121] C

• CVE-2022-49539MedFeb 26, 2025
  affected >= 5.16.0, < 5.18.3fixed 5.18.3

  In the Linux kernel, the following vulnerability has been resolved: rtw89: ser: fix CAM leaks occurring in L2 reset The CAM, meaning address CAM and bssid CAM here, will get leaks during SER (system error recover) L2 reset process and ieee80211_restart_hw() which is called by L

• CVE-2022-49538MedFeb 26, 2025
  affected >= 3.13.0, < 4.9.318fixed 4.9.318

  In the Linux kernel, the following vulnerability has been resolved: ALSA: jack: Access input_dev under mutex It is possible when using ASoC that input_dev is unregistered while calling snd_jack_report, which causes NULL pointer dereference. In order to prevent this serialize ac

• CVE-2022-49537MedFeb 26, 2025
  affected >= 5.15.0, < 5.15.46fixed 5.15.46

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix call trace observed during I/O with CMF enabled The following was seen with CMF enabled: BUG: using smp_processor_id() in preemptible code: systemd-udevd/31711 kernel: caller is lpfc_update_cmf

• CVE-2022-49536MedFeb 26, 2025
  affected >= 5.1.0, < 5.15.46fixed 5.15.46

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock During stress I/O tests with 500+ vports, hard LOCKUP call traces are observed. CPU A: native_queued_spin_lock_slowpath+0x192 _raw_spin_lock_irq

• CVE-2022-49535HigFeb 26, 2025
  affected >= 5.11.0, < 5.15.181fixed 5.15.181

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfc_issue_els_flogi() fails and returns non-zero status, the node reference count is decremented to trigger the release of the

• CVE-2022-49534MedFeb 26, 2025
  affected >= 2.6.23, < 5.18.3fixed 5.18.3

  In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT There is a potential memory leak in lpfc_ignore_els_cmpl() and lpfc_els_rsp_reject() that was allocated from NPIV PLOGI_RJT (lpfc_rcv_plogi()'s l

• CVE-2022-49533HigFeb 26, 2025
  affected >= 5.6.0, < 5.17.14fixed 5.17.14

  In the Linux kernel, the following vulnerability has been resolved: ath11k: Change max no of active probe SSID and BSSID to fw capability The maximum number of SSIDs in a for active probe requests is currently reported as 16 (WLAN_SCAN_PARAMS_MAX_SSID) when registering the driv

• CVE-2022-49532MedFeb 26, 2025
  affected >= 4.2.0, < 4.9.318fixed 4.9.318

  In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes drm_cvt_mode may return NULL and we should check it. This bug is found by syzkaller: FAULT_INJECTION stacktrace: [ 168.567394] FAULT_INJE

• CVE-2022-49531HigFeb 26, 2025
  affected >= 2.6.22, < 5.18.3fixed 5.18.3

  In the Linux kernel, the following vulnerability has been resolved: loop: implement ->free_disk Ensure that the lo_device which is stored in the gendisk private data is valid until the gendisk is freed. Currently the loop driver uses a lot of effort to make sure a device is no

• CVE-2022-49530HigFeb 26, 2025
  affected >= 4.9.0, < 4.9.318fixed 4.9.318

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix double free in si_parse_power_table() In function si_parse_power_table(), array adev->pm.dpm.ps and its member is allocated. If the allocation of each member fails, the array itself is freed and

• CVE-2022-49529MedFeb 26, 2025
  affected >= 5.18.0, < 5.18.3fixed 5.18.3

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fix the null pointer while the smu is disabled It needs to check if the pp_funcs is initialized while release the context, otherwise it will trigger null pointer panic while the software smu is n

• CVE-2022-49528MedFeb 26, 2025
  affected >= 5.18.0, < 5.18.3fixed 5.18.3

  In the Linux kernel, the following vulnerability has been resolved: media: i2c: dw9714: Disable the regulator when the driver fails to probe When the driver fails to probe, we will get the following splat: [ 59.305988] ------------[ cut here ]------------ [ 59.306417] WARN

• CVE-2022-49527MedFeb 26, 2025
  affected < 5.10.121fixed 5.10.121

  In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: avoid null dereference in deinit If venus_probe fails at pm_runtime_put_sync the error handling first calls hfi_destroy and afterwards hfi_core_deinit. As hfi_destroy sets core->ops to NULL,

• CVE-2022-49526MedFeb 26, 2025
  affected >= 3.5.0, < 4.19.247fixed 4.19.247

  In the Linux kernel, the following vulnerability has been resolved: md/bitmap: don't set sb values if can't pass sanity check If bitmap area contains invalid data, kernel will crash then mdadm triggers "Segmentation fault". This is cluster-md speical bug. In non-clustered env,

• CVE-2022-49525MedFeb 26, 2025
  affected >= 2.6.32, < 4.9.318fixed 4.9.318

  In the Linux kernel, the following vulnerability has been resolved: media: cx25821: Fix the warning when removing the module When removing the module, we will get the following warning: [ 14.746697] remove_proc_entry: removing non-empty directory 'irq/21', leaking at least '

• CVE-2022-49524HigFeb 26, 2025
  affected >= 4.8.0, < 4.14.283fixed 4.14.283

  In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: Fix the error handling in cx23885_initdev() When the driver fails to call the dma_set_mask(), the driver will get the following splat: [ 55.853884] BUG: KASAN: use-after-free in __proces

• CVE-2022-49523MedFeb 26, 2025
  affected >= 5.9.0, < 5.10.121fixed 5.10.121

  In the Linux kernel, the following vulnerability has been resolved: ath11k: disable spectral scan during spectral deinit When ath11k modules are removed using rmmod with spectral scan enabled, crash is observed. Different crash trace is observed for each crash. Send spectral s