kernel

Vulnerabilities (14,254)

• CVE-2022-49025HigOct 21, 2024
  affected >= 5.3.0, < 5.4.226fixed 5.4.226

  In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free when reverting termination table When having multiple dests with termination tables and second one or afterwards fails the driver reverts usage of term tables but doesn't reset the

• CVE-2022-49024MedOct 21, 2024
  affected >= 5.11.0, < 5.15.82fixed 5.15.82

  In the Linux kernel, the following vulnerability has been resolved: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods In m_can_pci_remove() and error handling path of m_can_pci_probe(), m_can_class_free_dev() should be called to free resource allocated

• CVE-2022-49023HigOct 21, 2024
  affected >= 5.1.0, < 5.4.226fixed 5.4.226

  In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix buffer overflow in elem comparison For vendor elements, the code here assumes that 5 octets are present without checking. Since the element itself is already checked to fit, we only need to

• CVE-2022-49022HigOct 21, 2024
  affected >= 5.5.0, < 5.10.158fixed 5.10.158

  In the Linux kernel, the following vulnerability has been resolved: wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration Fix possible out-of-bound access in ieee80211_get_rate_duration routine as reported by the following UBSAN report: UBSAN: array-index-out-o

• CVE-2022-49021MedOct 21, 2024
  affected >= 2.6.14, < 4.9.335fixed 4.9.335

  In the Linux kernel, the following vulnerability has been resolved: net: phy: fix null-ptr-deref while probe() failed I got a null-ptr-deref report as following when doing fault injection test: BUG: kernel NULL pointer dereference, address: 0000000000000058 Oops: 0000 [#1] PRE

• CVE-2022-49020MedOct 21, 2024
  affected >= 2.6.33, < 4.9.335fixed 4.9.335

  In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix a potential socket leak in p9_socket_open Both p9_fd_create_tcp() and p9_fd_create_unix() will call p9_socket_open(). If the creation of p9_trans_fd fails, p9_fd_create_tcp() and p9_fd_create_unix()

• CVE-2022-49019MedOct 21, 2024
  affected >= 4.17.0, < 5.4.226fixed 5.4.226

  In the Linux kernel, the following vulnerability has been resolved: net: ethernet: nixge: fix NULL dereference In function nixge_hw_dma_bd_release() dereference of NULL pointer priv->rx_bd_v is possible for the case of its allocation failure in nixge_hw_dma_bd_init(). Move for

• CVE-2022-49018MedOct 21, 2024
  affected >= 6.0.0, < 6.0.12fixed 6.0.12

  In the Linux kernel, the following vulnerability has been resolved: mptcp: fix sleep in atomic at close time Matt reported a splat at msk close time: BUG: sleeping function called from invalid context at net/mptcp/protocol.c:2877 in_atomic(): 1, irqs_disabled(): 0, non

• CVE-2022-49017HigOct 21, 2024
  affected >= 5.5.0, < 5.10.158fixed 5.10.158

  In the Linux kernel, the following vulnerability has been resolved: tipc: re-fetch skb cb after tipc_msg_validate As the call trace shows, the original skb was freed in tipc_msg_validate(), and dereferencing the old skb cb would cause an use-after-free crash. BUG: KASAN: use

• CVE-2022-49016MedOct 21, 2024
  affected >= 5.14.0, < 5.15.82fixed 5.15.82

  In the Linux kernel, the following vulnerability has been resolved: net: mdiobus: fix unbalanced node reference count I got the following report while doing device(mscc-miim) load test with CONFIG_OF_UNITTEST and CONFIG_OF_DYNAMIC enabled: OF: ERROR: memory leak, expected re

• CVE-2022-49015HigOct 21, 2024
  affected >= 3.13.0, < 4.9.335fixed 4.9.335

  In the Linux kernel, the following vulnerability has been resolved: net: hsr: Fix potential use-after-free The skb is delivered to netif_rx() which may free it, after calling this, dereferencing skb may trigger use-after-free.

• CVE-2022-49014HigOct 21, 2024
  affected >= 4.17.0, < 4.19.268fixed 4.19.268

  In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix use-after-free in tun_detach() syzbot reported use-after-free in tun_detach() [1]. This causes call trace like below: ================================================================== BUG: KASA

• CVE-2022-49013MedOct 21, 2024
  affected >= 4.15.0, < 5.4.226fixed 5.4.226

  In the Linux kernel, the following vulnerability has been resolved: sctp: fix memory leak in sctp_stream_outq_migrate() When sctp_stream_outq_migrate() is called to release stream out resources, the memory pointed to by prio_head in stream out is not released. The memory leak

• CVE-2022-49012MedOct 21, 2024
  affected >= 6.0.0, < 6.0.12fixed 6.0.12

  In the Linux kernel, the following vulnerability has been resolved: afs: Fix server->active leak in afs_put_server The atomic_read was accidentally replaced with atomic_inc_return, which prevents the server from getting cleaned up and causes rmmod to hang with a warning: C

• CVE-2022-49011MedOct 21, 2024
  affected >= 3.14.0, < 4.9.335fixed 4.9.335

  In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() As comment of pci_get_domain_bus_and_slot() says, it returns a pci device with refcount increment, when finish using it, the caller must decremen

• CVE-2022-49010MedOct 21, 2024
  affected >= 3.0.0, < 4.9.335fixed 4.9.335

  In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Check for null before removing sysfs attrs If coretemp_add_core() gets an error then pdata->core_data[indx] is already NULL and has been kfreed. Don't pass that to sysfs_remove_group() as that

• CVE-2022-49009MedOct 21, 2024
  affected >= 5.18.0, < 6.0.12fixed 6.0.12

  In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus-ec-sensors) Add checks for devm_kcalloc As the devm_kcalloc may return NULL, the return value needs to be checked to avoid NULL poineter dereference.

• CVE-2022-49008MedOct 21, 2024
  affected >= 6.0.0, < 6.0.12fixed 6.0.12

  In the Linux kernel, the following vulnerability has been resolved: can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down In can327_feed_frame_to_netdev(), it did not free the skb when netdev is down, and all callers of can327_feed_frame_to_netd

• CVE-2022-49007MedOct 21, 2024
  affected >= 2.6.30, < 4.9.335fixed 4.9.335

  In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() Syzbot reported a null-ptr-deref bug: NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds

• CVE-2022-49006HigOct 21, 2024
  affected >= 2.6.33, < 5.4.226fixed 5.4.226

  In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events have been added and removed, the "type" field of the event then uses the first type number that is available (not currently