kernel

Vulnerabilities (14,255)

• CVE-2022-49158MedFeb 26, 2025
  affected >= 4.16.0, < 5.10.258fixed 5.10.258

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix warning message due to adisc being flushed Fix warning message due to adisc being flushed. Linux kernel triggered a warning message where a different error code type is not matching up with

• CVE-2022-49157MedFeb 26, 2025
  affected >= 2.6.33, < 5.15.33fixed 5.15.33

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix premature hw access after PCI error After a recoverable PCI error has been detected and recovered, qla driver needs to check to see if the error condition still persist and/or wait for the OS

• CVE-2022-49156MedFeb 26, 2025
  affected >= 4.11.0, < 5.10.110fixed 5.10.110

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix scheduling while atomic The driver makes a call into midlayer (fc_remote_port_delete) which can put the thread to sleep. The thread that originates the call is in interrupt context. The combi

• CVE-2022-49155MedFeb 26, 2025
  affected >= 4.13.0, < 4.14.276fixed 4.14.276

  In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() [ 12.323788] BUG: using smp_processor_id() in preemptible [00000000] code: systemd-udevd/1020 [ 12.332297] caller is qla2xxx_create_qpair+0x3

• CVE-2022-49154HigFeb 26, 2025
  affected >= 4.9.0, < 5.10.110fixed 5.10.110

  In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: fix panic on out-of-bounds guest IRQ As guest_irq is coming from KVM_IRQFD API call, it may trigger crash in svm_update_pi_irte() due to out-of-bounds: crash> bt PID: 22218 TASK: ffff951a6ad74980 C

• CVE-2022-49153MedFeb 26, 2025
  affected >= 5.6.0, < 5.10.110fixed 5.10.110

  In the Linux kernel, the following vulnerability has been resolved: wireguard: socket: free skb in send6 when ipv6 is disabled I got a memory leak report: unreferenced object 0xffff8881191fc040 (size 232): comm "kworker/u17:0", pid 23193, jiffies 4295238848 (age 3464.870s)

• CVE-2022-49152MedFeb 26, 2025
  affected >= 5.17.0, < 5.17.2fixed 5.17.2

  In the Linux kernel, the following vulnerability has been resolved: XArray: Fix xas_create_range() when multi-order entry present If there is already an entry present that is of order >= XA_CHUNK_SHIFT when we call xas_create_range(), xas_create_range() will misinterpret that e

• CVE-2022-49151MedFeb 26, 2025
  affected >= 4.12.0, < 4.14.276fixed 4.14.276

  In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: properly check endpoint type Syzbot reported warning in usb_submit_urb() which is caused by wrong endpoint type. We should check that in endpoint is actually present to prevent this warning. Fou

• CVE-2022-49150MedFeb 26, 2025
  affected >= 5.17.0, < 5.17.2fixed 5.17.2

  In the Linux kernel, the following vulnerability has been resolved: rtc: gamecube: Fix refcount leak in gamecube_rtc_read_offset_from_sram The of_find_compatible_node() function returns a node pointer with refcount incremented, We should use of_node_put() on it when done Add th

• CVE-2022-49149CriFeb 26, 2025
  affected >= 4.15.0, < 5.10.110fixed 5.10.110

  In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call timer start racing with call destruction The rxrpc_call struct has a timer used to handle various timed events relating to a call. This timer can get started from the packet input routines that

• CVE-2022-49148MedFeb 26, 2025
  affected >= 5.8.0, < 5.10.110fixed 5.10.110

  In the Linux kernel, the following vulnerability has been resolved: watch_queue: Free the page array when watch_queue is dismantled Commit 7ea1a0124b6d ("watch_queue: Free the alloc bitmap when the watch_queue is torn down") took care of the bitmap, but not the page array. B

• CVE-2022-49147MedFeb 26, 2025
  affected >= 5.11.0, < 5.15.33fixed 5.15.33

  In the Linux kernel, the following vulnerability has been resolved: block: Fix the maximum minor value is blk_alloc_ext_minor() ida_alloc_range(..., min, max, ...) returns values from min to max, inclusive. So, NR_EXT_DEVT is a valid idx returned by blk_alloc_ext_minor(). Thi

• CVE-2022-49146MedFeb 26, 2025
  affected >= 5.16.0, < 5.16.19fixed 5.16.19

  In the Linux kernel, the following vulnerability has been resolved: virtio: use virtio_device_ready() in virtio_device_restore() After waking up a suspended VM, the kernel prints the following trace for virtio drivers which do not directly call virtio_device_ready() in the .res

• CVE-2022-49145HigFeb 26, 2025
  affected >= 4.4.0, < 4.9.311fixed 4.9.311

  In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Avoid out of bounds access when parsing _CPC data If the NumEntries field in the _CPC return package is less than 2, do not attempt to access the "Revision" element of that package, because it may n

• CVE-2022-49144MedFeb 26, 2025
  affected >= 5.5.0, < 5.10.110fixed 5.10.110

  In the Linux kernel, the following vulnerability has been resolved: io_uring: fix memory leak of uid in files registration When there are no files for __io_sqe_files_scm() to process in the range, it'll free everything and return. However, it forgets to put uid.

• CVE-2022-49142HigFeb 26, 2025
  affected >= 5.12.0, < 5.15.33fixed 5.15.33

  In the Linux kernel, the following vulnerability has been resolved: net: preserve skb_end_offset() in skb_unclone_keeptruesize() syzbot found another way to trigger the infamous WARN_ON_ONCE(delta < len) in skb_try_coalesce() [1] I was able to root cause the issue to kfence.

• CVE-2022-49141MedFeb 26, 2025
  affected >= 5.17.0, < 5.17.3fixed 5.17.3

  In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: fix possible NULL pointer dereference As the possible failure of the allocation, kzalloc() may return NULL pointer. Therefore, it should be better to check the 'sgi' in order to prevent the der

• CVE-2022-49139MedFeb 26, 2025
  affected >= 2.6.30, < 5.4.231fixed 5.4.231

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt This event is just specified for SCO and eSCO link types. On the reception of a HCI_Synchronous_Connection_Complete for a BDADDR of an existing LE con

• CVE-2022-49138HigFeb 26, 2025
  affected >= 2.6.27, < 5.17.3fixed 5.17.3

  In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Ignore multiple conn complete events When one of the three connection complete events is received multiple times for the same handle, the device is registered multiple times which leads to

• CVE-2022-49137MedFeb 26, 2025
  affected >= 4.15.0, < 4.19.238fixed 4.19.238

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj This issue takes place in an error path in amdgpu_cs_fence_to_handle_ioctl(). When `info->in.what` falls into default case, the function simply ret