kernel

Vulnerabilities (14,255)

• CVE-2022-49422MedFeb 26, 2025
  affected >= 5.6.0, < 5.10.121fixed 5.10.121

  In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix the error handling path in idxd_cdev_register() If a call to alloc_chrdev_region() fails, the already allocated resources are leaking. Add the needed error handling path to fix the leak.

• CVE-2022-49421MedFeb 26, 2025
  affected >= 3.17.0, < 4.9.318fixed 4.9.318

  In the Linux kernel, the following vulnerability has been resolved: video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node

• CVE-2022-49420MedFeb 26, 2025
  affected < 5.18.3fixed 5.18.3

  In the Linux kernel, the following vulnerability has been resolved: net: annotate races around sk->sk_bound_dev_if UDP sendmsg() is lockless, and reads sk->sk_bound_dev_if while this field can be changed by another thread. Adds minimal annotations to avoid KCSAN splats for UDP

• CVE-2022-49419HigFeb 26, 2025
  affected < 5.15.46fixed 5.15.46

  In the Linux kernel, the following vulnerability has been resolved: video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup Commit b3c9a924aab6 ("fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove") fixed a use-after-free error due the vesafb driver

• CVE-2022-49418CriFeb 26, 2025
  affected >= 5.16.0, < 5.18.3fixed 5.18.3

  In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4_label on referral lookup. Send along the already-allocated fattr along with nfs4_fs_locations, and drop the memcpy of fattr. We end up growing two more allocations, but th

• CVE-2022-49417MedFeb 26, 2025
  affected >= 5.17.0, < 5.17.14fixed 5.17.14

  In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mei: fix potential NULL-ptr deref If SKB allocation fails, continue rather than using the NULL pointer. Coverity CID: 1497650

• CVE-2022-49416HigFeb 26, 2025
  affected >= 3.17.0, < 4.9.318fixed 4.9.318

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free in chanctx code In ieee80211_vif_use_reserved_context(), when we have an old context and the new context's replace_state is set to IEEE80211_CHANCTX_REPLACE_NONE, we free the

• CVE-2022-49415MedFeb 26, 2025
  affected >= 5.18.0, < 5.18.3fixed 5.18.3

  In the Linux kernel, the following vulnerability has been resolved: ipmi:ipmb: Fix refcount leak in ipmi_ipmb_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak

• CVE-2022-49414MedFeb 26, 2025
  affected >= 3.8.0, < 5.4.207fixed 5.4.207

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix race condition between ext4_write and ext4_convert_inline_data Hulk Robot reported a BUG_ON: ================================================================== EXT4-fs error (device loop3): ext4_mb_

• CVE-2022-49413HigFeb 26, 2025
  affected >= 4.12.0, < 5.4.198fixed 5.4.198

  In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio When the process is migrated to a different cgroup (or in case of writeback just starts submitting bios associated with a different cgroup) bfq_merge_bio() can

• CVE-2022-49412HigFeb 26, 2025
  affected >= 5.13.0, < 5.15.46fixed 5.15.46

  In the Linux kernel, the following vulnerability has been resolved: bfq: Avoid merging queues with different parents It can happen that the parent of a bfqq changes between the moment we decide two queues are worth to merge (and set bic->stable_merge_bfqq) and the moment bfq_se

• CVE-2022-49411HigFeb 26, 2025
  affected >= 4.12.0, < 5.4.198fixed 5.4.198

  In the Linux kernel, the following vulnerability has been resolved: bfq: Make sure bfqg for which we are queueing requests is online Bios queued into BFQ IO scheduler can be associated with a cgroup that was already offlined. This may then cause insertion of this bfq_group into

• CVE-2022-49410HigFeb 26, 2025
  affected >= 4.17.0, < 4.19.247fixed 4.19.247

  In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in create_var_ref() In create_var_ref(), init_var_ref() is called to initialize the fields of variable ref_field, which is allocated in the previous function call to create_hi

• CVE-2022-49409MedFeb 26, 2025
  affected >= 3.13.0, < 5.4.277fixed 5.4.277

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in __es_tree_search Hulk Robot reported a BUG_ON: ================================================================== kernel BUG at fs/ext4/extents_status.c:199! [...] RIP: 0010:ext4_es_end fs/e

• CVE-2022-49408MedFeb 26, 2025
  affected >= 5.17.0, < 5.17.14fixed 5.17.14

  In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in parse_apply_sb_mount_options() If processing the on-disk mount options fails after any memory was allocated in the ext4_fs_context, e.g. s_qf_names, then this memory is leaked. Fix thi

• CVE-2022-49407CriFeb 26, 2025
  affected >= 2.6.22, < 4.9.318fixed 4.9.318

  In the Linux kernel, the following vulnerability has been resolved: dlm: fix plock invalid read This patch fixes an invalid read showed by KASAN. A unlock will allocate a "struct plock_op" and a followed send_op() will append it to a global send_list data structure. In some cas

• CVE-2022-49406MedFeb 26, 2025
  affected >= 5.16.0, < 5.17.14fixed 5.17.14

  In the Linux kernel, the following vulnerability has been resolved: block: Fix potential deadlock in blk_ia_range_sysfs_show() When being read, a sysfs attribute is already protected against removal with the kobject node active reference counter. As a result, in blk_ia_range_sy

• CVE-2022-49405HigFeb 26, 2025
  affected >= 5.15.0, < 5.15.46fixed 5.15.46

  In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan() This code has a check to prevent read overflow but it needs another check to prevent writing beyond the end of the ->Ssid[] array.

• CVE-2022-49404MedFeb 26, 2025
  affected >= 4.3.0, < 4.9.318fixed 4.9.318

  In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix potential integer multiplication overflow errors When multiplying of different types, an overflow is possible even when storing the result in a larger type. This is because the conversion is done

• CVE-2022-49403MedFeb 26, 2025
  affected >= 5.17.0, < 5.17.14fixed 5.17.14

  In the Linux kernel, the following vulnerability has been resolved: lib/string_helpers: fix not adding strarray to device's resource list Add allocated strarray to device's resource list. This is a must to automatically release strarray when the device disappears. Without this