kernel

Vulnerabilities (14,119)

• CVE-2022-48766MedJun 20, 2024
  affected >= 5.11.0, < 5.16.5fixed 5.16.5

  In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU. Mirrors the logic for dcn30. Cue lots of WARNs and some kernel panics without this fix.

• CVE-2022-48765MedJun 20, 2024
  affected >= 4.10.0, < 5.15.19fixed 5.15.19

  In the Linux kernel, the following vulnerability has been resolved: KVM: LAPIC: Also cancel preemption timer during SET_LAPIC The below warning is splatting during guest reboot. ------------[ cut here ]------------ WARNING: CPU: 0 PID: 1931 at arch/x86/kvm/x86.c:10322 kvm_

• CVE-2022-48764MedJun 20, 2024
  affected >= 5.16.3, < 5.16.5fixed 5.16.5

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2} Free the "struct kvm_cpuid_entry2" array on successful post-KVM_RUN KVM_SET_CPUID{,2} to fix a memory leak, the callers of kvm_set_cpuid()

• CVE-2022-48763MedJun 20, 2024
  affected >= 4.15.0, < 5.10.97fixed 5.10.97

  In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Forcibly leave nested virt when SMM state is toggled Forcibly leave nested virtualization operation if userspace toggles SMM state via KVM_SET_VCPU_EVENTS or KVM_SYNC_X86_EVENTS. If userspace forces

• CVE-2022-48762HigJun 20, 2024
  affected >= 5.16.0, < 5.16.5fixed 5.16.5

  In the Linux kernel, the following vulnerability has been resolved: arm64: extable: fix load_unaligned_zeropad() reg indices In ex_handler_load_unaligned_zeropad() we erroneously extract the data and addr register indices from ex->type rather than ex->data. As ex->type will con

• CVE-2022-48761MedJun 20, 2024
  affected >= 4.12.0, < 5.10.96fixed 5.10.96

  In the Linux kernel, the following vulnerability has been resolved: usb: xhci-plat: fix crash when suspend if remote wake enable Crashed at i.mx8qm platform when suspend if enable remote wakeup Internal error: synchronous external abort: 96000210 [#1] PREEMPT SMP Modules linke

• CVE-2022-48760HigJun 20, 2024
  affected >= 2.6.29, < 4.4.302fixed 4.4.302

  In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix hang in usb_kill_urb by adding memory barriers The syzbot fuzzer has identified a bug in which processes hang waiting for usb_kill_urb() to return. It turns out the issue is not unlinking the UR

• CVE-2022-48759HigJun 20, 2024
  affected >= 4.11.0, < 4.14.265fixed 4.14.265

  In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev struct rpmsg_ctrldev contains a struct cdev. The current code frees the rpmsg_ctrldev struct in rpmsg_ctrldev_release_device(), but the cdev i

• CVE-2022-48758MedJun 20, 2024
  affected >= 3.2.0, < 4.4.302fixed 4.4.302

  In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() The bnx2fc_destroy() functions are removing the interface before calling destroy_work. This results multiple WARNings from sysfs_remo

• CVE-2022-48757HigJun 20, 2024
  affected >= 2.6.26, < 4.4.302fixed 4.4.302

  In the Linux kernel, the following vulnerability has been resolved: net: fix information leakage in /proc/net/ptype In one net namespace, after creating a packet socket without binding it to a device, users in other net namespaces can observe the new `packet_type` added by this

• CVE-2022-48756MedJun 20, 2024
  affected >= 4.3.0, < 4.14.265fixed 4.14.265

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable The function performs a check on the "phy" input parameter, however, it is used before the check. Initialize the "dev" variable after the sanity check

• CVE-2022-48755MedJun 20, 2024
  affected >= 4.8.0, < 5.10.96fixed 5.10.96

  In the Linux kernel, the following vulnerability has been resolved: powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 Johan reported the below crash with test_bpf on ppc64 e5500: test_bpf: #296 ALU_END_FROM_LE 64: 0x0123456789abcdef -> 0x67452301 jited:1

• CVE-2022-48754HigJun 20, 2024
  affected >= 4.16.0, < 4.19.228fixed 4.19.228

  In the Linux kernel, the following vulnerability has been resolved: phylib: fix potential use-after-free Commit bafbdd527d56 ("phylib: Add device reset GPIO support") added call to phy_device_reset(phydev) after the put_device() call in phy_detach(). The comment before the put

• CVE-2022-48753MedJun 20, 2024
  affected >= 5.16.0, < 5.16.5fixed 5.16.5

  In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in disk_register_independent_access_ranges kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add() If this function returns an error,

• CVE-2022-48752MedJun 20, 2024
  affected >= 5.10.94, < 5.10.96fixed 5.10.96

  In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending Running selftest with CONFIG_PPC_IRQ_SOFT_MASK_DEBUG enabled in kernel triggered below warning: [ 172.851380] ---------

• CVE-2022-48751HigJun 20, 2024
  affected >= 5.1.0, < 5.15.19fixed 5.15.19

  In the Linux kernel, the following vulnerability has been resolved: net/smc: Transitional solution for clcsock race issue We encountered a crash in smc_setsockopt() and it is caused by accessing smc->clcsock after clcsock was released. BUG: kernel NULL pointer dereference, ad

• CVE-2022-48750MedJun 20, 2024
  affected >= 5.16.0, < 5.16.5fixed 5.16.5

  In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix crash in clear_caseopen Paweł Marciniak reports the following crash, observed when clearing the chassis intrusion alarm. BUG: kernel NULL pointer dereference, address: 0000000000000028 PGD

• CVE-2022-48749MedJun 20, 2024
  affected >= 5.8.0, < 5.10.96fixed 5.10.96

  In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc The function performs a check on the "ctx" input parameter, however, it is used before the check. Initialize the "base" variable after the sanity chec

• CVE-2022-48748HigJun 20, 2024
  affected >= 5.6.0, < 5.10.96fixed 5.10.96

  In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix memory leak in __allowed_ingress When using per-vlan state, if vlan snooping and stats are disabled, untagged or priority-tagged ingress frame will go to check pvid state. If the port sta

• CVE-2022-48747HigJun 20, 2024
  affected < 5.4.176fixed 5.4.176

  In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in bio_truncate() bio_truncate() clears the buffer outside of last block of bdev, however current bio_truncate() is using the wrong offset of page. So it can return the uninitialized dat