Debian Linux vulnerabilities

CVE-2024-47735 [MEDIUM] CVE-2024-47735: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: F... In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled Fix missuse of spin_lock_irq()/spin_unlock_irq() when spin_lock_irqsave()/spin_lock_irqrestore() was hold. This was discovered through the lock debugging, and the corresponding log is as follows: raw_local_irq_restore() called with IRQs

CVE-2024-49573 [MEDIUM] CVE-2024-49573: linux - In the Linux kernel, the following vulnerability has been resolved: sched/fair:... In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix NEXT_BUDDY Adam reports that enabling NEXT_BUDDY insta triggers a WARN in pick_next_entity(). Moving clear_buddies() up before the delayed dequeue bits ensures no ->next buddy becomes delayed. Further ensure no new ->next buddy ever starts as delayed. Scope: local bookworm: resolved

CVE-2023-53069 [MEDIUM] CVE-2023-53069: linux - In the Linux kernel, the following vulnerability has been resolved: octeontx2-v... In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for alloc_percpu Add the free_percpu for the allocated "vf->hw.lmt_info" in order to avoid memory leak, same as the "pf->hw.lmt_info" in `drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c`. Scope: local bookworm: resolved (fixed in 6.1.25-1) bullseye: resolved forky

CVE-2023-53653 [MEDIUM] CVE-2023-53653: linux - In the Linux kernel, the following vulnerability has been resolved: media: amph... In the Linux kernel, the following vulnerability has been resolved: media: amphion: fix REVERSE_INULL issues reported by coverity null-checking of a pointor is suggested before dereferencing it Scope: local bookworm: resolved (fixed in 6.1.55-1) bullseye: resolved forky: resolved (fixed in 6.5.3-1) sid: resolved (fixed in 6.5.3-1) trixie: resolved (fixed in 6.5.3-1)

CVE-2022-49881 [MEDIUM] CVE-2022-49881: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80... In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in query_regdb_file() In the function query_regdb_file() the alpha2 parameter is duplicated using kmemdup() and subsequently freed in regdb_fw_cb(). However, request_firmware_nowait() can fail without calling regdb_fw_cb() and thus leak memory. Scope: local bookworm:

CVE-2022-49861 [MEDIUM] CVE-2022-49861: linux - In the Linux kernel, the following vulnerability has been resolved: dmaengine: ... In the Linux kernel, the following vulnerability has been resolved: dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() A clk_prepare_enable() call in the probe is not balanced by a corresponding clk_disable_unprepare() in the remove function. Add the missing call. Scope: local bookworm: resolved (fixed in 6.0.10-1) bullseye: resolved (fixed in 5.10.158-

CVE-2022-49887 [MEDIUM] CVE-2022-49887: linux - In the Linux kernel, the following vulnerability has been resolved: media: meso... In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix possible refcount leak in vdec_probe() v4l2_device_unregister need to be called to put the refcount got by v4l2_device_register when vdec_probe fails or vdec_remove is called. Scope: local bookworm: resolved (fixed in 6.0.8-1) bullseye: resolved (fixed in 5.10.158-1) forky: r

CVE-2022-49800 [MEDIUM] CVE-2022-49800: linux - In the Linux kernel, the following vulnerability has been resolved: tracing: Fi... In the Linux kernel, the following vulnerability has been resolved: tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() test_gen_synth_cmd() only free buf in fail path, hence buf will leak when there is no failure. Add kfree(buf) to prevent the memleak. The same reason and solution in test_empty_synth_event(). unreferenced object 0xffff8881

CVE-2022-49835 [MEDIUM] CVE-2022-49835: linux - In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: ... In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potential memleak in 'add_widget_node' As 'kobject_add' may allocated memory for 'kobject->name' when return error. And in this function, if call 'kobject_add' failed didn't free kobject. So call 'kobject_put' to recycling resources. Scope: local bookworm: resolved (fixed in 6.0.10-1)

CVE-2022-49818 [MEDIUM] CVE-2022-49818: linux - In the Linux kernel, the following vulnerability has been resolved: mISDN: fix ... In the Linux kernel, the following vulnerability has been resolved: mISDN: fix misuse of put_device() in mISDN_register_device() We should not release reference by put_device() before calling device_initialize(). Scope: local bookworm: resolved (fixed in 6.0.10-1) bullseye: resolved (fixed in 5.10.158-1) forky: resolved (fixed in 6.0.10-1) sid: resolved (fixed in 6.

CVE-2022-49803 [MEDIUM] CVE-2022-49803: linux - In the Linux kernel, the following vulnerability has been resolved: netdevsim: ... In the Linux kernel, the following vulnerability has been resolved: netdevsim: Fix memory leak of nsim_dev->fa_cookie kmemleak reports this issue: unreferenced object 0xffff8881bac872d0 (size 8): comm "sh", pid 58603, jiffies 4481524462 (age 68.065s) hex dump (first 8 bytes): 04 00 00 00 de ad be ef ........ backtrace: [] __kmalloc+0x49/0x150 [] nsim_dev_trap_fa_coo

CVE-2024-46779 [MEDIUM] CVE-2024-46779: linux - In the Linux kernel, the following vulnerability has been resolved: drm/imagina... In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Free pvr_vm_gpuva after unlink This caused a measurable memory leak. Although the individual allocations are small, the leaks occurs in a high-usage codepath (remapping or unmapping device memory) so they add up quickly. Scope: local bookworm: resolved bullseye: resolved forky: reso

CVE-2024-56564 [MEDIUM] CVE-2024-56564: linux - In the Linux kernel, the following vulnerability has been resolved: ceph: pass ... In the Linux kernel, the following vulnerability has been resolved: ceph: pass cred pointer to ceph_mds_auth_match() This eliminates a redundant get_current_cred() call, because ceph_mds_check_access() has already obtained this pointer. As a side effect, this also fixes a reference leak in ceph_mds_auth_match(): by omitting the get_current_cred() call, no additional

CVE-2024-46703 [MEDIUM] CVE-2024-46703: linux - In the Linux kernel, the following vulnerability has been resolved: Revert "ser... In the Linux kernel, the following vulnerability has been resolved: Revert "serial: 8250_omap: Set the console genpd always on if no console suspend" This reverts commit 68e6939ea9ec3d6579eadeab16060339cdeaf940. Kevin reported that this causes a crash during suspend on platforms that dont use PM domains. Scope: local bookworm: resolved bullseye: resolved forky: reso

CVE-2023-53061 [MEDIUM] CVE-2023-53061: linux - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix ... In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2_open() Reference count of acls will leak when memory allocation fails. Fix this by adding the missing posix_acl_release(). Scope: local bookworm: resolved (fixed in 6.1.25-1) bullseye: resolved forky: resolved (fixed in 6.1.25-1) sid: resolved (fixed in 6.1.

CVE-2025-37807 [MEDIUM] CVE-2025-37807: linux - In the Linux kernel, the following vulnerability has been resolved: bpf: Fix km... In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kmemleak warning for percpu hashmap Vlad Poenaru reported the following kmemleak issue: unreferenced object 0x606fd7c44ac8 (size 32): backtrace (crc 0): pcpu_alloc_noprof+0x730/0xeb0 bpf_map_alloc_percpu+0x69/0xc0 prealloc_init+0x9d/0x1b0 htab_map_alloc+0x363/0x510 map_create+0x215/0x3a0 __

CVE-2024-46708 [MEDIUM] CVE-2024-46708: linux - In the Linux kernel, the following vulnerability has been resolved: pinctrl: qc... In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: x1e80100: Fix special pin offsets Remove the erroneus 0x100000 offset to prevent the boards from crashing on pin state setting, as well as for the intended state changes to take effect. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.10.9-1) sid: resolve

CVE-2023-53042 [MEDIUM] CVE-2023-53042: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/dis... In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not set DRR on pipe Commit [WHY] Writing to DRR registers such as OTG_V_TOTAL_MIN on the same frame as a pipe commit can cause underflow. Scope: local bookworm: resolved (fixed in 6.1.25-1) bullseye: open forky: resolved (fixed in 6.1.25-1) sid: resolved (fixed in 6.1.25-1) trixi

CVE-2022-49878 [MEDIUM] CVE-2022-49878: linux - In the Linux kernel, the following vulnerability has been resolved: bpf, verifi... In the Linux kernel, the following vulnerability has been resolved: bpf, verifier: Fix memory leak in array reallocation for stack state If an error (NULL) is returned by krealloc(), callers of realloc_array() were setting their allocation pointers to NULL, but on error krealloc() does not touch the original allocation. This would result in a memory resource leak. I

CVE-2024-58075 [MEDIUM] CVE-2024-58075: linux - In the Linux kernel, the following vulnerability has been resolved: crypto: teg... In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - do not transfer req when tegra init fails The tegra_cmac_init or tegra_sha_init function may return an error when memory is exhausted. It should not transfer the request when they return an error. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.12.13-1)