Debian Linux vulnerabilities

CVE-2024-56711 [MEDIUM] CVE-2024-56711: linux - In the Linux kernel, the following vulnerability has been resolved: drm/panel: ... In the Linux kernel, the following vulnerability has been resolved: drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference drm_mode_duplicate() could return NULL due to lack of memory, which will then call NULL pointer dereference. Add a check to prevent it. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.12.8-1) sid

CVE-2022-48979 [MEDIUM] CVE-2022-48979: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/dis... In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix array index out of bound error in DCN32 DML [Why&How] LinkCapacitySupport array is indexed with the number of voltage states and not the number of max DPPs. Fix the error by changing the array declaration to use the correct (larger) array size of total number of voltage states.

CVE-2024-35838 [MEDIUM] CVE-2024-35838: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: mac80... In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential sta-link leak When a station is allocated, links are added but not set to valid yet (e.g. during connection to an AP MLD), we might remove the station without ever marking links valid, and leak them. Fix that. Scope: local bookworm: resolved (fixed in 6.1.76-1) bullseye

CVE-2024-53204 [MEDIUM] CVE-2024-53204: linux - In the Linux kernel, the following vulnerability has been resolved: phy: realte... In the Linux kernel, the following vulnerability has been resolved: phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe In rtk_usb3phy_probe() devm_kzalloc() may return NULL but this returned value is not checked. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.12.3-1) sid: resolved (fixed in 6.12.3-1) trixie: resolved (fixed in 6.1

CVE-2022-48860 [MEDIUM] CVE-2022-48860: linux - In the Linux kernel, the following vulnerability has been resolved: ethernet: F... In the Linux kernel, the following vulnerability has been resolved: ethernet: Fix error handling in xemaclite_of_probe This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak. As the remove function do. Scope: local bookworm: resolved (fixed in 5.16.18-1) bullseye: resolved (fix

CVE-2023-1095 [MEDIUM] CVE-2023-1095: linux - In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_des... In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference. Scope: local bookworm: resolved (fixed in 5.19.6-1) bullseye: resolved (fixed in 5

CVE-2025-21770 [MEDIUM] CVE-2025-21770: linux - In the Linux kernel, the following vulnerability has been resolved: iommu: Fix ... In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential memory leak in iopf_queue_remove_device() The iopf_queue_remove_device() helper removes a device from the per-iommu iopf queue when PRI is disabled on the device. It responds to all outstanding iopf's with an IOMMU_PAGE_RESP_INVALID code and detaches the device from the queue. H

CVE-2024-43905 [MEDIUM] CVE-2024-43905: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm:... In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr Check return value and conduct null pointer handling to avoid null pointer dereference. Scope: local bookworm: resolved (fixed in 6.1.106-1) bullseye: resolved (fixed in 5.10.226-1) forky: resolved (fixed in 6.10.6-1) sid: resolved (fixed

CVE-2024-43907 [MEDIUM] CVE-2024-43907: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/... In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules Check the pointer value to fix potential null pointer dereference Scope: local bookworm: resolved (fixed in 6.1.106-1) bullseye: resolved (fixed in 5.10.226-1) forky: resolved (fixed in 6.10.6-1) sid: resolved (fixed in 6.10

CVE-2024-57988 [MEDIUM] CVE-2024-57988: linux - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() devm_kstrdup() can return a NULL pointer on failure,but this returned value in btbcm_get_board_name() is not checked. Add NULL check in btbcm_get_board_name(), to handle kernel NULL pointer dereference error. Scope: local bookworm: resolved

CVE-2024-57989 [MEDIUM] CVE-2024-57989: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:... In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links In mt7925_change_vif_links() devm_kzalloc() may return NULL but this returned value is not checked. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.12.13-1) sid: resolved (fixed in 6.12.13-1) trixie: r

CVE-2022-3108 [MEDIUM] CVE-2022-3108: linux - An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_... An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check of the return value of kmemdup(). Scope: local bookworm: resolved (fixed in 5.16.7-1) bullseye: open forky: resolved (fixed in 5.16.7-1) sid: resolved (fixed in 5.16.7-1) trixie: resolved (fixed in 5.16.7-1)

CVE-2024-27072 [MEDIUM] CVE-2024-27072: linux - In the Linux kernel, the following vulnerability has been resolved: media: usbt... In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Remove useless locks in usbtv_video_free() Remove locks calls in usbtv_video_free() because are useless and may led to a deadlock as reported here: https://syzkaller.appspot.com/x/bisect.txt?x=166dc872180000 Also remove usbtv_stop() call since it will be called when unregistering the d

CVE-2024-53199 [MEDIUM] CVE-2024-53199: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-a... In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-audmix: Add NULL check in imx_audmix_probe devm_kasprintf() can return a NULL pointer on failure,but this returned value in imx_audmix_probe() is not checked. Add NULL check in imx_audmix_probe(), to handle kernel NULL pointer dereference error. Scope: local bookworm: resolved bullseye: re

CVE-2024-43902 [MEDIUM] CVE-2024-43902: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/dis... In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checker before passing variables Checks null pointer before passing variables to functions. This fixes 3 NULL_RETURNS issues reported by Coverity. Scope: local bookworm: resolved (fixed in 6.1.106-1) bullseye: open forky: resolved (fixed in 6.10.6-1) sid: resolved (fixed in

CVE-2024-56728 [MEDIUM] CVE-2024-56728: linux - In the Linux kernel, the following vulnerability has been resolved: octeontx2-p... In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c Add error pointer check after calling otx2_mbox_get_rsp(). Scope: local bookworm: resolved (fixed in 6.1.123-1) bullseye: resolved (fixed in 5.10.234-1) forky: resolved (fixed in 6.12.3-1) sid: resolved (fixed in 6.12.3-1) trixie: resol

CVE-2024-56742 [MEDIUM] CVE-2024-56742: linux - In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: ... In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() Fix an unwind issue in mlx5vf_add_migration_pages(). If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak. Any pages successfully added to the SG table will be freed as part

CVE-2024-50091 [MEDIUM] CVE-2024-50091: linux - In the Linux kernel, the following vulnerability has been resolved: dm vdo: don... In the Linux kernel, the following vulnerability has been resolved: dm vdo: don't refer to dedupe_context after releasing it Clear the dedupe_context pointer in a data_vio whenever ownership of the context is lost, so that vdo can't examine it accidentally. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.11.4-1) sid: resolved (fixed in

CVE-2024-44996 [MEDIUM] CVE-2024-44996: linux - In the Linux kernel, the following vulnerability has been resolved: vsock: fix ... In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive ->recvmsg calls After a vsock socket has been added to a BPF sockmap, its prot->recvmsg has been replaced with vsock_bpf_recvmsg(). Thus the following recursiion could happen: vsock_bpf_recvmsg() -> __vsock_recvmsg() -> vsock_connectible_recvmsg() -> prot->recvmsg() -> vsock_bpf

CVE-2024-56537 [MEDIUM] CVE-2024-56537: linux - In the Linux kernel, the following vulnerability has been resolved: drm: xlnx: ... In the Linux kernel, the following vulnerability has been resolved: drm: xlnx: zynqmp_disp: layer may be null while releasing layer->info can be null if we have an error on the first layer in zynqmp_disp_create_layers Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.12.3-1) sid: resolved (fixed in 6.12.3-1) trixie: resolved (fixed in 6.