Debian Linux vulnerabilities

CVE-2022-50123 [MEDIUM] CVE-2022-50123: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: media... In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Fix missing of_node_put() in error paths. Scope: local bookworm: resolved (fixed in 6.0.2-1) bulls

CVE-2022-50158 [MEDIUM] CVE-2022-50158: linux - In the Linux kernel, the following vulnerability has been resolved: mtd: partit... In the Linux kernel, the following vulnerability has been resolved: mtd: partitions: Fix refcount leak in parse_redboot_of of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: reso

CVE-2022-50061 [MEDIUM] CVE-2022-50061: linux - In the Linux kernel, the following vulnerability has been resolved: pinctrl: no... In the Linux kernel, the following vulnerability has been resolved: pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak." Scope: local bookworm: resolved (fixed in 6.0.2-1) bul

CVE-2022-50160 [MEDIUM] CVE-2022-50160: linux - In the Linux kernel, the following vulnerability has been resolved: mtd: maps: ... In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in ap_flash_init of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: resolved (fi

CVE-2022-50124 [MEDIUM] CVE-2022-50124: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: mt679... In the Linux kernel, the following vulnerability has been resolved: ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullsey

CVE-2022-50161 [MEDIUM] CVE-2022-50161: linux - In the Linux kernel, the following vulnerability has been resolved: mtd: maps: ... In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in of_flash_probe_versatile of_find_matching_node_and_match() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 6.0.2-1) b

CVE-2022-50017 [MEDIUM] CVE-2022-50017: linux - In the Linux kernel, the following vulnerability has been resolved: mips: caviu... In the Linux kernel, the following vulnerability has been resolved: mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start We should call of_node_put() for the reference 'uctl_node' returned by of_get_parent() which will increase the refcount. Otherwise, there will be a refcount leak bug. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullsey

CVE-2022-50162 [MEDIUM] CVE-2022-50162: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: liber... In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: Fix possible refcount leak in if_usb_probe() usb_get_dev will be called before lbs_get_firmware_async which means that usb_put_dev need to be called when lbs_get_firmware_async fails. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: resolved (fixed in 5.10.140-1) forky: r

CVE-2025-38045 [MEDIUM] CVE-2025-38045: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwi... In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix debug actions order The order of actions taken for debug was implemented incorrectly. Now we implemented the dump split and do the FW reset only in the middle of the dump (rather than the FW killing itself on error.) As a result, some of the actions taken when applying the config

CVE-2025-38096 [MEDIUM] CVE-2025-38096: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwi... In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: don't warn when if there is a FW error iwl_trans_reclaim is warning if it is called when the FW is not alive. But if it is called when there is a pending restart, i.e. after a FW error, there is no need to warn, instead - return silently. Scope: local bookworm: open bullseye: open for

CVE-2025-38099 [MEDIUM] CVE-2025-38099: linux - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken A SCO connection without the proper voice_setting can cause the controller to lock up. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.12.32-1) sid: resolved (fixed in 6.12.32-1) trixie: resolve

CVE-2022-49893 [MEDIUM] CVE-2022-49893: linux - In the Linux kernel, the following vulnerability has been resolved: cxl/region:... In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix cxl_region leak, cleanup targets at region delete When a region is deleted any targets that have been previously assigned to that region hold references to it. Trigger those references to drop by detaching all targets at unregister_region() time. Otherwise that region object will lea

CVE-2022-49795 [MEDIUM] CVE-2022-49795: linux - In the Linux kernel, the following vulnerability has been resolved: rethook: fi... In the Linux kernel, the following vulnerability has been resolved: rethook: fix a potential memleak in rethook_alloc() In rethook_alloc(), the variable rh is not freed or passed out if handler is NULL, which could lead to a memleak, fix it. [Masami: Add "rethook:" tag to the title.] Acke-by: Masami Hiramatsu (Google) Scope: local bookworm: resolved (fixed in 6.0.10

CVE-2022-50157 [MEDIUM] CVE-2022-50157: linux - In the Linux kernel, the following vulnerability has been resolved: PCI: microc... In the Linux kernel, the following vulnerability has been resolved: PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains() of_get_next_child() returns a node pointer with refcount incremented, so we should use of_node_put() on it when we don't need it anymore. mc_pcie_init_irq_domains() only calls of_node_put() in the normal path, missing it in some error p

CVE-2022-50154 [MEDIUM] CVE-2022-50154: linux - In the Linux kernel, the following vulnerability has been resolved: PCI: mediat... In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() of_get_child_by_name() returns a node pointer with refcount incremented, so we should use of_node_put() on it when we don't need it anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed i

CVE-2022-50155 [MEDIUM] CVE-2022-50155: linux - In the Linux kernel, the following vulnerability has been resolved: mtd: parser... In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset of_find_node_by_path() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 6.0.2-

CVE-2022-50065 [MEDIUM] CVE-2022-50065: linux - In the Linux kernel, the following vulnerability has been resolved: virtio_net:... In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix memory leak inside XPD_TX with mergeable When we call xdp_convert_buff_to_frame() to get xdpf, if it returns NULL, we should check if xdp_page was allocated by xdp_linearize_page(). If it is newly allocated, it should be freed here alone. Just like any other "goto err_xdp". Scope: lo

CVE-2022-50125 [MEDIUM] CVE-2022-50125: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: cros_... In the Linux kernel, the following vulnerability has been resolved: ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 6.0.2-1) bu

CVE-2022-50121 [MEDIUM] CVE-2022-50121: linux - In the Linux kernel, the following vulnerability has been resolved: remoteproc:... In the Linux kernel, the following vulnerability has been resolved: remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init Every iteration of for_each_available_child_of_node() decrements the reference count of the previous node. When breaking early from a for_each_available_child_of_node() loop, we need to explicitly call of_node_put() on the child node. Add

CVE-2022-50114 [MEDIUM] CVE-2022-50114: linux - In the Linux kernel, the following vulnerability has been resolved: net: 9p: fi... In the Linux kernel, the following vulnerability has been resolved: net: 9p: fix refcount leak in p9_read_work() error handling p9_req_put need to be called when m->rreq->rc.sdata is NULL to avoid temporary refcount leak. [Dominique: commit wording adjustments, p9_req_put argument fixes for rebase] Scope: local bookworm: resolved (fixed in 5.19.6-1) bullseye: open f