Debian Linux vulnerabilities

CVE-2024-35805 [MEDIUM] CVE-2024-35805: linux - In the Linux kernel, the following vulnerability has been resolved: dm snapshot... In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dm_exception_table_exit There was reported lockup when we exit a snapshot with many exceptions. Fix this by adding "cond_resched" to the loop that frees the exceptions. Scope: local bookworm: resolved (fixed in 6.1.85-1) bullseye: resolved (fixed in 5.10.216-1) forky: reso

CVE-2024-36948 [MEDIUM] CVE-2024-36948: linux - In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_m... In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_migrate: Cast to output precision before multiplying operands Addressing potential overflow in result of multiplication of two lower precision (u32) operands before widening it to higher precision (u64). -v2 Fix commit message and description. (Rodrigo) (cherry picked from commit 34820967a

CVE-2021-47568 [MEDIUM] CVE-2021-47568: linux - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix ... In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memleak in get_file_stream_info() Fix memleak in get_file_stream_info() Scope: local bookworm: resolved (fixed in 5.15.15-1) bullseye: resolved forky: resolved (fixed in 5.15.15-1) sid: resolved (fixed in 5.15.15-1) trixie: resolved (fixed in 5.15.15-1)

CVE-2022-49965 [MEDIUM] CVE-2022-49965: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm:... In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: add missing ->fini_xxxx interfaces for some SMU13 asics Without these, potential memory leak may be induced. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: resolved forky: resolved (fixed in 6.0.2-1) sid: resolved (fixed in 6.0.2-1) trixie: resolved (fixed in 6.0.2-1)

CVE-2022-48753 [MEDIUM] CVE-2022-48753: linux - In the Linux kernel, the following vulnerability has been resolved: block: fix ... In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in disk_register_independent_access_ranges kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add() If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix

CVE-2025-22000 [MEDIUM] CVE-2025-22000: linux - In the Linux kernel, the following vulnerability has been resolved: mm/huge_mem... In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: drop beyond-EOF folios with the right number of refs When an after-split folio is large and needs to be dropped due to EOF, folio_put_refs(folio, folio_nr_pages(folio)) should be used to drop all page cache refs. Otherwise, the folio will not be freed, causing memory leak. This leak

CVE-2025-21982 [MEDIUM] CVE-2025-21982: linux - In the Linux kernel, the following vulnerability has been resolved: pinctrl: nu... In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw devm_kasprintf() calls can return null pointers on failure. But the return values were not checked in npcm8xx_gpio_fw(). Add NULL check in npcm8xx_gpio_fw(), to handle kernel NULL pointer dereference error. Scope: local bookworm: resolved

CVE-2024-56773 [MEDIUM] CVE-2024-56773: linux - In the Linux kernel, the following vulnerability has been resolved: kunit: Fix ... In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunit_device_driver_test() kunit_kzalloc() may return a NULL pointer, dereferencing it without NULL check may lead to NULL dereference. Add a NULL check for test_state. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.12.5-1) sid

CVE-2025-37793 [MEDIUM] CVE-2025-37793: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel... In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() devm_kasprintf() returns NULL when memory allocation fails. Currently, avs_component_probe() does not check for this case, which results in a NULL pointer dereference. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fi

CVE-2024-56713 [MEDIUM] CVE-2024-56713: linux - In the Linux kernel, the following vulnerability has been resolved: net: netdev... In the Linux kernel, the following vulnerability has been resolved: net: netdevsim: fix nsim_pp_hold_write() nsim_pp_hold_write() has two problems: 1) It may return with rtnl held, as found by syzbot. 2) Its return value does not propagate an error if any. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.12.8-1) sid: resolved (fixed in

CVE-2024-53132 [MEDIUM] CVE-2024-53132: linux - In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: ... In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix "Missing outer runtime PM protection" warning Fix the following drm_WARN: [953.586396] xe 0000:00:02.0: [drm] Missing outer runtime PM protection ... [953.587090] ? xe_pm_runtime_get_noresume+0x8d/0xa0 [xe] [953.587208] guc_exec_queue_add_msg+0x28/0x130 [xe] [953.587319] guc_exec_queu

CVE-2024-54455 [MEDIUM] CVE-2024-54455: linux - In the Linux kernel, the following vulnerability has been resolved: accel/ivpu:... In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix general protection fault in ivpu_bo_list() Check if ctx is not NULL before accessing its fields. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.12.8-1) sid: resolved (fixed in 6.12.8-1) trixie: resolved (fixed in 6.12.8-1)

CVE-2023-53131 [MEDIUM] CVE-2023-53131: linux - In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix... In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a server shutdown leak Fix a race where kthread_stop() may prevent the threadfn from ever getting called. If that happens the svc_rqst will not be cleaned up. Scope: local bookworm: resolved (fixed in 6.1.20-1) bullseye: resolved (fixed in 5.10.178-1) forky: resolved (fixed in 6.1.20-1)

CVE-2022-49926 [MEDIUM] CVE-2022-49926: linux - In the Linux kernel, the following vulnerability has been resolved: net: dsa: F... In the Linux kernel, the following vulnerability has been resolved: net: dsa: Fix possible memory leaks in dsa_loop_init() kmemleak reported memory leaks in dsa_loop_init(): kmemleak: 12 new suspected memory leaks unreferenced object 0xffff8880138ce000 (size 2048): comm "modprobe", pid 390, jiffies 4295040478 (age 238.976s) backtrace: [] kmalloc_trace+0x26/0x60 [] p

CVE-2022-49922 [MEDIUM] CVE-2022-49922: linux - In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrv... In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() nfcmrvl_i2c_nci_send() will be called by nfcmrvl_nci_send(), and skb should be freed in nfcmrvl_i2c_nci_send(). However, nfcmrvl_nci_send() will only free skb when i2c_master_send() return >=0, which means skb will memleak when i2c_ma

CVE-2022-49923 [MEDIUM] CVE-2022-49923: linux - In the Linux kernel, the following vulnerability has been resolved: nfc: nxp-nc... In the Linux kernel, the following vulnerability has been resolved: nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() nxp_nci_send() will call nxp_nci_i2c_write(), and only free skb when nxp_nci_i2c_write() failed. However, even if the nxp_nci_i2c_write() run succeeds, the skb will not be freed in nxp_nci_i2c_write(). As the result, the skb will memleak. nxp

CVE-2024-53053 [MEDIUM] CVE-2024-53053: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ... In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix another deadlock during RTC update If ufshcd_rtc_work calls ufshcd_rpm_put_sync() and the pm's usage_count is 0, we will enter the runtime suspend callback. However, the runtime suspend callback will wait to flush ufshcd_rtc_work, causing a deadlock. Replace ufshcd_rpm_put_sync(

CVE-2023-53128 [MEDIUM] CVE-2023-53128: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3m... In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix throttle_groups memory leak Add a missing kfree(). Scope: local bookworm: resolved (fixed in 6.1.25-1) bullseye: resolved forky: resolved (fixed in 6.1.25-1) sid: resolved (fixed in 6.1.25-1) trixie: resolved (fixed in 6.1.25-1)

CVE-2024-38591 [MEDIUM] CVE-2024-38591: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: F... In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix deadlock on SRQ async events. xa_lock for SRQ table may be required in AEQ. Use xa_store_irq()/ xa_erase_irq() to avoid deadlock. Scope: local bookworm: resolved (fixed in 6.1.94-1) bullseye: resolved (fixed in 5.10.234-1) forky: resolved (fixed in 6.8.12-1) sid: resolved (fixed in 6.8

CVE-2024-26719 [MEDIUM] CVE-2024-26719: linux - In the Linux kernel, the following vulnerability has been resolved: nouveau: of... In the Linux kernel, the following vulnerability has been resolved: nouveau: offload fence uevents work to workqueue This should break the deadlock between the fctx lock and the irq lock. This offloads the processing off the work from the irq into a workqueue. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.7.7-1) sid: resolved (fixed