Debian Linux vulnerabilities

CVE-2022-49210 [MEDIUM] CVE-2022-49210: linux - In the Linux kernel, the following vulnerability has been resolved: MIPS: pgall... In the Linux kernel, the following vulnerability has been resolved: MIPS: pgalloc: fix memory leak caused by pgd_free() pgd page is freed by generic implementation pgd_free() since commit f9cb654cb550 ("asm-generic: pgalloc: provide generic pgd_free()"), however, there are scenarios that the system uses more than one page as the pgd table, in such cases the generic

CVE-2022-49453 [MEDIUM] CVE-2022-49453: linux - In the Linux kernel, the following vulnerability has been resolved: soc: ti: ti... In the Linux kernel, the following vulnerability has been resolved: soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc The allocation funciton devm_kcalloc may fail and return a null pointer, which would cause a null-pointer dereference later. It might be better to check it and directly return -ENOMEM just like the usage of devm_kcalloc in previous co

CVE-2022-49473 [MEDIUM] CVE-2022-49473: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: ti: j... In the Linux kernel, the following vulnerability has been resolved: ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 5.18.5-1) bullseye:

CVE-2022-49480 [MEDIUM] CVE-2022-49480: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-h... In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe of_find_device_by_node() takes reference, we should use put_device() to release it. when devm_kzalloc() fails, it doesn't have a put_device(), it will cause refcount leak. Add missing put_device() to fix this. Scope: local bookworm: resolved (fixed

CVE-2022-49283 [MEDIUM] CVE-2022-49283: linux - In the Linux kernel, the following vulnerability has been resolved: firmware: s... In the Linux kernel, the following vulnerability has been resolved: firmware: sysfb: fix platform-device leak in error path Make sure to free the platform device also in the unlikely event that registration fails. Scope: local bookworm: resolved (fixed in 5.17.3-1) bullseye: resolved forky: resolved (fixed in 5.17.3-1) sid: resolved (fixed in 5.17.3-1) trixie: resol

CVE-2022-49454 [MEDIUM] CVE-2022-49454: linux - In the Linux kernel, the following vulnerability has been resolved: PCI: mediat... In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup() The of_find_compatible_node() function returns a node pointer with refcount incremented, We should use of_node_put() on it when done Add the missing of_node_put() to release the refcount. Scope: local bookworm: resolved (fixed in 5.18.5-1

CVE-2022-49487 [MEDIUM] CVE-2022-49487: linux - In the Linux kernel, the following vulnerability has been resolved: mtd: rawnan... In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe() It will cause null-ptr-deref when using 'res', if platform_get_resource() returns NULL, so move using 'res' after devm_ioremap_resource() that will check it to avoid null-ptr-deref. Scope: local bookworm: resolved (fixed in 5.18.5-

CVE-2022-49211 [MEDIUM] CVE-2022-49211: linux - In the Linux kernel, the following vulnerability has been resolved: mips: cdmm:... In the Linux kernel, the following vulnerability has been resolved: mips: cdmm: Fix refcount leak in mips_cdmm_phys_base The of_find_compatible_node() function returns a node pointer with refcount incremented, We should use of_node_put() on it when done Add the missing of_node_put() to release the refcount. Scope: local bookworm: resolved (fixed in 5.17.3-1) bullsey

CVE-2022-49366 [MEDIUM] CVE-2022-49366: linux - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix ... In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smb_check_perm_dacl() The issue happens in a specific path in smb_check_perm_dacl(). When "id" and "uid" have the same value, the function simply jumps out of the loop without decrementing the reference count of the object "posix_acls", which is increased by get_ac

CVE-2024-41055 [MEDIUM] CVE-2024-41055: linux - In the Linux kernel, the following vulnerability has been resolved: mm: prevent... In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") changed pfn_section_valid() to add a READ_ONCE() call around "ms->usage" to fix a race with section_deactivate() where ms->usage can be cleared. The READ_ONCE() c

CVE-2024-56630 [MEDIUM] CVE-2024-56630: linux - In the Linux kernel, the following vulnerability has been resolved: ocfs2: free... In the Linux kernel, the following vulnerability has been resolved: ocfs2: free inode when ocfs2_get_init_inode() fails syzbot is reporting busy inodes after unmount, for commit 9c89fe0af826 ("ocfs2: Handle error from dquot_initialize()") forgot to call iput() when new_inode() succeeded and dquot_initialize() failed. Scope: local bookworm: resolved (fixed in 6.1.123

CVE-2023-52904 [MEDIUM] CVE-2023-52904: linux - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-a... In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() The subs function argument may be NULL, so do not use it before the NULL check. Scope: local bookworm: resolved (fixed in 6.1.7-1) bullseye: resolved forky: resolved (fixed in 6.1.7-1) sid: resolved (fixed in 6.1.

CVE-2022-49173 [MEDIUM] CVE-2022-49173: linux - In the Linux kernel, the following vulnerability has been resolved: spi: fsi: I... In the Linux kernel, the following vulnerability has been resolved: spi: fsi: Implement a timeout for polling status The data transfer routines must poll the status register to determine when more data can be shifted in or out. If the hardware gets into a bad state, these polling loops may never exit. Prevent this by returning an error if a timeout is exceeded. Scop

CVE-2022-48893 [MEDIUM] CVE-2022-48893: linux - In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt... In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Cleanup partial engine discovery failures If we abort driver initialisation in the middle of gt/engine discovery, some engines will be fully setup and some not. Those incompletely setup engines only have 'engine->release == NULL' and so will leak any of the common objects allocated. v2:

CVE-2024-50287 [MEDIUM] CVE-2024-50287: linux - In the Linux kernel, the following vulnerability has been resolved: media: v4l2... In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: prevent the risk of a division by zero As reported by Coverity, the logic at tpg_precalculate_line() blindly rescales the buffer even when scaled_witdh is equal to zero. If this ever happens, this will cause a division by zero. Instead, add a WARN_ON_ONCE() to trigger such cases and

CVE-2022-48946 [MEDIUM] CVE-2022-48946: linux - In the Linux kernel, the following vulnerability has been resolved: udf: Fix pr... In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead. Fix the problem and use udf_delete_aext() for deleting extent to avoid some code duplication. Scope: local bookworm: resolv

CVE-2022-3630 [LOW] CVE-2022-3630: linux - A vulnerability was found in Linux Kernel. It has been rated as problematic. Thi... A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects some unknown processing of the file fs/fscache/cookie.c of the component IPsec. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211931. Scope: local bookworm: resolved (fixed in

CVE-2023-52997 [MEDIUM] CVE-2023-52997: linux - In the Linux kernel, the following vulnerability has been resolved: ipv4: preve... In the Linux kernel, the following vulnerability has been resolved: ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() if (!type) continue; if (type > RTAX_MAX) return -EINVAL; ... metrics[type - 1] = val; @type being used as an array index, we need to prevent cpu speculation or risk leaking kernel memory content. Scope: local bookworm: resolved (fixe

CVE-2023-53005 [MEDIUM] CVE-2023-53005: linux - In the Linux kernel, the following vulnerability has been resolved: trace_event... In the Linux kernel, the following vulnerability has been resolved: trace_events_hist: add check for return value of 'create_hist_field' Function 'create_hist_field' is called recursively at trace_events_hist.c:1954 and can return NULL-value that's why we have to check it to avoid null pointer dereference. Found by Linux Verification Center (linuxtesting.org) with S

CVE-2022-49680 [MEDIUM] CVE-2022-49680: linux - In the Linux kernel, the following vulnerability has been resolved: ARM: exynos... In the Linux kernel, the following vulnerability has been resolved: ARM: exynos: Fix refcount leak in exynos_map_pmu of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. of_node_put() checks null pointer. Scope: local bookworm: resolved (fi