Debian Linux vulnerabilities

CVE-2023-53579 [MEDIUM] CVE-2023-53579: linux - In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu... In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix irq domain leak Uwe Kleine-König pointed out we still have one resource leak in the mvebu driver triggered on driver detach. Let's address it with a custom devm action. Scope: local bookworm: resolved (fixed in 6.1.52-1) bullseye: open forky: resolved (fixed in 6.4.11-1) sid: resolv

CVE-2022-50233 [MEDIUM] CVE-2022-50233: linux - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ... In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not. Scope: local bookworm: resolved (fixed in 6.0.2-1) b

CVE-2023-53592 [MEDIUM] CVE-2023-53592: linux - In the Linux kernel, the following vulnerability has been resolved: gpio: sifiv... In the Linux kernel, the following vulnerability has been resolved: gpio: sifive: Fix refcount leak in sifive_gpio_probe of_irq_find_parent() returns a node pointer with refcount incremented, We should use of_node_put() on it when not needed anymore. Add missing of_node_put() to avoid refcount leak. Scope: local bookworm: resolved (fixed in 6.1.7-1) bullseye: resolv

CVE-2023-53687 [MEDIUM] CVE-2023-53687: linux - In the Linux kernel, the following vulnerability has been resolved: tty: serial... In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk When the best clk is searched, we iterate over all possible clk. If we find a better match, the previous one, if any, needs to be freed. If a better match has already been found, we still need to free the new o

CVE-2023-53298 [MEDIUM] CVE-2023-53298: linux - In the Linux kernel, the following vulnerability has been resolved: nfc: fix me... In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of se_io context in nfc_genl_se_io The callback context for sending/receiving APDUs to/from the selected secure element is allocated inside nfc_genl_se_io and supposed to be eventually freed in se_io_cb callback function. However, there are several error paths where the bwi_time

CVE-2023-53567 [MEDIUM] CVE-2023-53567: linux - In the Linux kernel, the following vulnerability has been resolved: spi: qup: D... In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a permanent leak. To fix this, only skip hardware disabling if waking the

CVE-2023-53300 [MEDIUM] CVE-2023-53300: linux - In the Linux kernel, the following vulnerability has been resolved: media: hi84... In the Linux kernel, the following vulnerability has been resolved: media: hi846: Fix memleak in hi846_init_controls() hi846_init_controls doesn't clean the allocated ctrl_hdlr in case there is a failure, which causes memleak. Add v4l2_ctrl_handler_free to free the resource properly. Scope: local bookworm: resolved (fixed in 6.1.37-1) bullseye: resolved forky: resol

CVE-2023-53390 [MEDIUM] CVE-2023-53390: linux - In the Linux kernel, the following vulnerability has been resolved: drivers: ba... In the Linux kernel, the following vulnerability has been resolved: drivers: base: dd: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. Scope: local

CVE-2023-53409 [MEDIUM] CVE-2023-53409: linux - In the Linux kernel, the following vulnerability has been resolved: drivers: ba... In the Linux kernel, the following vulnerability has been resolved: drivers: base: component: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. Scope:

CVE-2023-53402 [MEDIUM] CVE-2023-53402: linux - In the Linux kernel, the following vulnerability has been resolved: kernel/prin... In the Linux kernel, the following vulnerability has been resolved: kernel/printk/index.c: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. Scope: lo

CVE-2023-53290 [MEDIUM] CVE-2023-53290: linux - In the Linux kernel, the following vulnerability has been resolved: samples/bpf... In the Linux kernel, the following vulnerability has been resolved: samples/bpf: Fix fout leak in hbm's run_bpf_prog Fix fout being fopen'ed but then not subsequently fclose'd. In the affected branch, fout is otherwise going out of scope. Scope: local bookworm: resolved (fixed in 6.1.37-1) bullseye: resolved (fixed in 5.10.191-1) forky: resolved (fixed in 6.3.7-1) s

CVE-2023-53249 [MEDIUM] CVE-2023-53249: linux - In the Linux kernel, the following vulnerability has been resolved: clk: imx: c... In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe Use devm_of_iomap() instead of of_iomap() to automatically handle the unused ioremap region. If any error occurs, regions allocated by kzalloc() will leak, but using devm_kzalloc() instead will automatically free the memory using devm_kfre

CVE-2023-53562 [MEDIUM] CVE-2023-53562: linux - In the Linux kernel, the following vulnerability has been resolved: drm/msm: fi... In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case a subcomponent fails to bind. Patchwork: https://patchwork.freedesktop.org/patch/525094/ Scope: local bookworm: resolved (fixed in 6.1.37-1) bullseye: open forky: resolved (fixed in 6.3.7-1) sid: resolved (fixe

CVE-2023-53292 [MEDIUM] CVE-2023-53292: linux - In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix... In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none After grabbing q->sysfs_lock, q->elevator may become NULL because of elevator switch. Fix the NULL dereference on q->elevator by checking it with lock. Scope: local bookworm: open bullseye: resolved forky: resolved (fixed in 6.4.1

CVE-2023-53258 [MEDIUM] CVE-2023-53258: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/dis... In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix possible underflow for displays with large vblank [Why] Underflow observed when using a display with a large vblank region and low refresh rate [How] Simplify calculation of vblank_nom Increase value for VBlankNomDefaultUS to 800us Scope: local bookworm: resolved (fixed in 6.1.5

CVE-2023-53385 [MEDIUM] CVE-2023-53385: linux - In the Linux kernel, the following vulnerability has been resolved: media: mdp3... In the Linux kernel, the following vulnerability has been resolved: media: mdp3: Fix resource leaks in of_find_device_by_node Use put_device to release the object get through of_find_device_by_node, avoiding resource leaks. Scope: local bookworm: resolved (fixed in 6.1.55-1) bullseye: resolved forky: resolved (fixed in 6.5.6-1) sid: resolved (fixed in 6.5.6-1) trixi

CVE-2023-53170 [MEDIUM] CVE-2023-53170: linux - In the Linux kernel, the following vulnerability has been resolved: net: dsa: R... In the Linux kernel, the following vulnerability has been resolved: net: dsa: Removed unneeded of_node_put in felix_parse_ports_node Remove unnecessary of_node_put from the continue path to prevent child node from being released twice, which could avoid resource leak or other unexpected issues. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixe

CVE-2023-53682 [MEDIUM] CVE-2023-53682: linux - In the Linux kernel, the following vulnerability has been resolved: hwmon: (xge... In the Linux kernel, the following vulnerability has been resolved: hwmon: (xgene) Fix ioremap and memremap leak Smatch reports: drivers/hwmon/xgene-hwmon.c:757 xgene_hwmon_probe() warn: 'ctx->pcc_comm_addr' from ioremap() not released on line: 757. This is because in drivers/hwmon/xgene-hwmon.c:701 xgene_hwmon_probe(), ioremap and memremap is not released, which ma

CVE-2023-53460 [MEDIUM] CVE-2023-53460: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88... In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix memory leak in rtw_usb_probe() drivers/net/wireless/realtek/rtw88/usb.c:876 rtw_usb_probe() warn: 'hw' from ieee80211_alloc_hw() not released on lines: 811 Fix this by modifying return to a goto statement. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 6.3.7-1)

CVE-2023-53266 [MEDIUM] CVE-2023-53266: linux - In the Linux kernel, the following vulnerability has been resolved: arm64: acpi... In the Linux kernel, the following vulnerability has been resolved: arm64: acpi: Fix possible memory leak of ffh_ctxt Allocated 'ffh_ctxt' memory leak is possible if the SMCCC version and conduit checks fail and -EOPNOTSUPP is returned without freeing the allocated memory. Fix the same by moving the allocation after the SMCCC version and conduit checks. Scope: local