Debian Linux vulnerabilities

CVE-2022-49668 [MEDIUM] CVE-2022-49668: linux - In the Linux kernel, the following vulnerability has been resolved: PM / devfre... In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. This function only calls of_node_put() in normal path, missing it in error paths. Add missing of_node_put() to a

CVE-2021-47345 [MEDIUM] CVE-2021-47345: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: F... In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix rdma_resolve_route() memory leak Fix a memory leak when "mda_resolve_route() is called more than once on the same "rdma_cm_id". This is possible if cma_query_handler() triggers the RDMA_CM_EVENT_ROUTE_ERROR flow which puts the state machine back and allows rdma_resolve_route() to be ca

CVE-2024-56536 [MEDIUM] CVE-2024-56536: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: cw120... In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: Fix potential NULL dereference A recent refactoring was identified by static analysis to cause a potential NULL dereference, fix this! Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.12.3-1) sid: resolved (fixed in 6.12.3-1) trixie: resolved (fixed in 6.1

CVE-2022-49439 [MEDIUM] CVE-2022-49439: linux - In the Linux kernel, the following vulnerability has been resolved: powerpc/fsl... In the Linux kernel, the following vulnerability has been resolved: powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 5.18.5-1) bullseye: resolved (

CVE-2022-49373 [MEDIUM] CVE-2022-49373: linux - In the Linux kernel, the following vulnerability has been resolved: watchdog: t... In the Linux kernel, the following vulnerability has been resolved: watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() in some error paths. Scope: local bookworm: resolved (fixed in 5.18.5-1) bullseye: resolved (fixed i

CVE-2024-26920 [MEDIUM] CVE-2024-26920: linux - In the Linux kernel, the following vulnerability has been resolved: tracing/tri... In the Linux kernel, the following vulnerability has been resolved: tracing/trigger: Fix to return error if failed to alloc snapshot Fix register_snapshot_trigger() to return error code if it failed to allocate a snapshot instead of 0 (success). Unless that, it will register snapshot trigger without an error. Scope: local bookworm: resolved (fixed in 6.1.82-1) bulls

CVE-2022-49184 [MEDIUM] CVE-2022-49184: linux - In the Linux kernel, the following vulnerability has been resolved: net: sparx5... In the Linux kernel, the following vulnerability has been resolved: net: sparx5: switchdev: fix possible NULL pointer dereference As the possible failure of the allocation, devm_kzalloc() may return NULL pointer. Therefore, it should be better to check the 'db' in order to prevent the dereference of NULL pointer. Scope: local bookworm: resolved (fixed in 5.17.3-1) b

CVE-2022-49386 [MEDIUM] CVE-2022-49386: linux - In the Linux kernel, the following vulnerability has been resolved: net: ethern... In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. am65_cpsw_init_cpts() and am65_cpsw_nuss_probe() don't release the refcount in error case. Add missing of_node_

CVE-2022-49676 [MEDIUM] CVE-2022-49676: linux - In the Linux kernel, the following vulnerability has been resolved: memory: sam... In the Linux kernel, the following vulnerability has been resolved: memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. This function doesn't call of_node_put() in some error paths. To unify the structure, Add put_node l

CVE-2022-49241 [MEDIUM] CVE-2022-49241: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel... In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Fix error handling in sam9x5_wm8731_driver_probe The device_node pointer is returned by of_parse_phandle() with refcount incremented. We should use of_node_put() on it when done. This function only calls of_node_put() in the regular path. And it will cause refcount leak in error path. S

CVE-2022-49477 [MEDIUM] CVE-2022-49477: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: samsu... In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: Fix refcount leak in aries_audio_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. If extcon_find_edev_by_node() fails, it doesn't call of_node_put() Calling of_node_put() after extcon_find_edev_by_node() to fix thi

CVE-2022-49071 [MEDIUM] CVE-2022-49071: linux - In the Linux kernel, the following vulnerability has been resolved: drm/panel: ... In the Linux kernel, the following vulnerability has been resolved: drm/panel: ili9341: fix optional regulator handling If the optional regulator lookup fails, reset the pointer to NULL. Other functions such as mipi_dbi_poweron_reset_conditional() only do a NULL pointer check and will otherwise dereference the error pointer. Scope: local bookworm: resolved (fixed in

CVE-2022-49392 [MEDIUM] CVE-2022-49392: linux - In the Linux kernel, the following vulnerability has been resolved: serial: 825... In the Linux kernel, the following vulnerability has been resolved: serial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probe platform_get_resource() may fail and return NULL, so we should better check it's return value to avoid a NULL pointer dereference. Scope: local bookworm: resolved (fixed in 5.18.5-1) bullseye: resolved forky: resolved (f

CVE-2022-49284 [MEDIUM] CVE-2022-49284: linux - In the Linux kernel, the following vulnerability has been resolved: coresight: ... In the Linux kernel, the following vulnerability has been resolved: coresight: syscfg: Fix memleak on registration failure in cscfg_create_device device_register() calls device_initialize(), according to doc of device_initialize: Use put_device() to give up your reference instead of freeing * @dev directly once you have called this function. To prevent potential mem

CVE-2022-49466 [MEDIUM] CVE-2022-49466: linux - In the Linux kernel, the following vulnerability has been resolved: regulator: ... In the Linux kernel, the following vulnerability has been resolved: regulator: scmi: Fix refcount leak in scmi_regulator_probe of_find_node_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 5.18.5-1) bullseye: resolved fo

CVE-2022-49213 [MEDIUM] CVE-2022-49213: linux - In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix... In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix error handling in ath10k_setup_msa_resources The device_node pointer is returned by of_parse_phandle() with refcount incremented. We should use of_node_put() on it when done. This function only calls of_node_put() in the regular path. And it will cause refcount leak in error path. Scope:

CVE-2024-56634 [MEDIUM] CVE-2024-56634: linux - In the Linux kernel, the following vulnerability has been resolved: gpio: grgpi... In the Linux kernel, the following vulnerability has been resolved: gpio: grgpio: Add NULL check in grgpio_probe devm_kasprintf() can return a NULL pointer on failure,but this returned value in grgpio_probe is not checked. Add NULL check in grgpio_probe, to handle kernel NULL pointer dereference error. Scope: local bookworm: resolved (fixed in 6.1.123-1) bullseye: r

CVE-2022-49342 [MEDIUM] CVE-2022-49342: linux - In the Linux kernel, the following vulnerability has been resolved: net: ethern... In the Linux kernel, the following vulnerability has been resolved: net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 5.18.5-1) bu

CVE-2022-49095 [MEDIUM] CVE-2022-49095: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: zorro... In the Linux kernel, the following vulnerability has been resolved: scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() The error handling path of the probe releases a resource that is not freed in the remove function. In some cases, a ioremap() must be undone. Add the missing iounmap() call in the remove function. Scope: local bookworm: resolved (fixed in

CVE-2024-50290 [MEDIUM] CVE-2024-50290: linux - In the Linux kernel, the following vulnerability has been resolved: media: cx24... In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registers fail, a negative number will be returned, causing an underflow when reading SNR registers. Prevent that. Scope: local bookworm: resolved (fixed in 6.1.119-1) bullseye: resolved (fixed in 5.10.234-1) f