Debian Linux vulnerabilities

CVE-2024-50172 [MEDIUM] CVE-2024-50172: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_r... In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a possible memory leak In bnxt_re_setup_chip_ctx() when bnxt_qplib_map_db_bar() fails driver is not freeing the memory allocated for "rdev->chip_ctx". Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.11.6-1) sid: resolved (fixed in 6.11.6-1) trixie: re

CVE-2022-48928 [MEDIUM] CVE-2022-48928: linux - In the Linux kernel, the following vulnerability has been resolved: iio: adc: m... In the Linux kernel, the following vulnerability has been resolved: iio: adc: men_z188_adc: Fix a resource leak in an error handling path If iio_device_register() fails, a previous ioremap() is left unbalanced. Update the error handling path and add the missing iounmap() call, as already done in the remove function. Scope: local bookworm: resolved (fixed in 5.16.12-

CVE-2024-41076 [MEDIUM] CVE-2024-41076: linux - In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix ... In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix memory leak in nfs4_set_security_label We leak nfs_fattr and nfs4_label every time we set a security xattr. Scope: local bookworm: resolved (fixed in 6.1.106-1) bullseye: resolved forky: resolved (fixed in 6.9.11-1) sid: resolved (fixed in 6.9.11-1) trixie: resolved (fixed in 6.9.11-1)

CVE-2022-50042 [MEDIUM] CVE-2022-50042: linux - In the Linux kernel, the following vulnerability has been resolved: net: genl: ... In the Linux kernel, the following vulnerability has been resolved: net: genl: fix error path memory leak in policy dumping If construction of the array of policies fails when recording non-first policy we need to unwind. netlink_policy_dump_add_policy() itself also needs fixing as it currently gives up on error without recording the allocated pointer in the pstate

CVE-2022-50134 [MEDIUM] CVE-2022-50134: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: ... In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: fix potential memory leak in setup_base_ctxt() setup_base_ctxt() allocates a memory chunk for uctxt->groups with hfi1_alloc_ctxt_rcv_groups(). When init_user_ctxt() fails, uctxt->groups is not released, which will lead to a memory leak. We should release the uctxt->groups with hfi1_free_c

CVE-2022-48718 [MEDIUM] CVE-2022-48718: linux - In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb:... In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb: Fix NULL pointer dereference mxsfb should not ever dereference the NULL pointer which drm_atomic_get_new_bridge_state is allowed to return. Assume a fixed format instead. Scope: local bookworm: resolved (fixed in 5.16.10-1) bullseye: resolved forky: resolved (fixed in 5.16.10-1) sid: res

CVE-2022-48888 [MEDIUM] CVE-2022-48888: linux - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu... In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path of_icc_get() alloc resources for path1, we should release it when not need anymore. Early return when IS_ERR_OR_NULL(path0) may leak path1. Defer getting path1 to fix this. Patchwork: https://patchwork.freedesktop.org/patch/514264/ Sco

CVE-2022-49874 [MEDIUM] CVE-2022-49874: linux - In the Linux kernel, the following vulnerability has been resolved: HID: hyperv... In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: fix possible memory leak in mousevsc_probe() If hid_add_device() returns error, it should call hid_destroy_device() to free hid_dev which is allocated in hid_allocate_device(). Scope: local bookworm: resolved (fixed in 6.0.10-1) bullseye: resolved (fixed in 5.10.158-1) forky: resolved (

CVE-2023-52706 [MEDIUM] CVE-2023-52706: linux - In the Linux kernel, the following vulnerability has been resolved: gpio: sim: ... In the Linux kernel, the following vulnerability has been resolved: gpio: sim: fix a memory leak Fix an inverted logic bug in gpio_sim_remove_hogs() that leads to GPIO hog structures never being freed. Scope: local bookworm: resolved (fixed in 6.1.15-1) bullseye: resolved forky: resolved (fixed in 6.1.15-1) sid: resolved (fixed in 6.1.15-1) trixie: resolved (fixed i

CVE-2022-48709 [MEDIUM] CVE-2022-48709: linux - In the Linux kernel, the following vulnerability has been resolved: ice: switch... In the Linux kernel, the following vulnerability has been resolved: ice: switch: fix potential memleak in ice_add_adv_recipe() When ice_add_special_words() fails, the 'rm' is not released, which will lead to a memory leak. Fix this up by going to 'err_unroll' label. Compile tested only. Scope: local bookworm: resolved (fixed in 6.1.12-1) bullseye: resolved forky: re

CVE-2022-48885 [MEDIUM] CVE-2022-48885: linux - In the Linux kernel, the following vulnerability has been resolved: ice: Fix po... In the Linux kernel, the following vulnerability has been resolved: ice: Fix potential memory leak in ice_gnss_tty_write() The ice_gnss_tty_write() return directly if the write_buf alloc failed, leaking the cmd_buf. Fix by free cmd_buf if write_buf alloc failed. Scope: local bookworm: resolved (fixed in 6.1.7-1) bullseye: resolved forky: resolved (fixed in 6.1.7-1)

CVE-2022-50186 [MEDIUM] CVE-2022-50186: linux - In the Linux kernel, the following vulnerability has been resolved: ath11k: fix... In the Linux kernel, the following vulnerability has been resolved: ath11k: fix missing skb drop on htc_tx_completion error On htc_tx_completion error the skb is not dropped. This is wrong since the completion_handler logic expect the skb to be consumed anyway even when an error is triggered. Not freeing the skb on error is a memory leak since the skb won't be freed

CVE-2022-49780 [MEDIUM] CVE-2022-49780: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: targe... In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() If device_register() fails in tcm_loop_setup_hba_bus(), the name allocated by dev_set_name() need be freed. As comment of device_register() says, it should use put_device() to give up the reference in the error path. So fix t

CVE-2021-47524 [MEDIUM] CVE-2021-47524: linux - In the Linux kernel, the following vulnerability has been resolved: serial: lit... In the Linux kernel, the following vulnerability has been resolved: serial: liteuart: fix minor-number leak on probe errors Make sure to release the allocated minor number before returning on probe errors. Scope: local bookworm: resolved (fixed in 5.15.15-1) bullseye: resolved forky: resolved (fixed in 5.15.15-1) sid: resolved (fixed in 5.15.15-1) trixie: resolved (

CVE-2021-47513 [MEDIUM] CVE-2021-47513: linux - In the Linux kernel, the following vulnerability has been resolved: net: dsa: f... In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering Avoid a memory leak if there is not a CPU port defined. Addresses-Coverity-ID: 1492897 ("Resource leak") Addresses-Coverity-ID: 1492899 ("Resource leak") Scope: local bookworm: resolved (fixed in 5.15.15-1) bullseye: resolved forky: reso

CVE-2022-50122 [MEDIUM] CVE-2022-50122: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: media... In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Fix refcount leak in some error paths. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye

CVE-2022-50188 [MEDIUM] CVE-2022-50188: linux - In the Linux kernel, the following vulnerability has been resolved: drm/meson: ... In the Linux kernel, the following vulnerability has been resolved: drm/meson: Fix refcount leak in meson_encoder_hdmi_init of_find_device_by_node() takes reference, we should use put_device() to release it when not need anymore. Add missing put_device() in error path to avoid refcount leak. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: resolved forky

CVE-2022-50110 [MEDIUM] CVE-2022-50110: linux - In the Linux kernel, the following vulnerability has been resolved: watchdog: s... In the Linux kernel, the following vulnerability has been resolved: watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource Unlike release_mem_region(), a call to release_resource() does not free the resource, so it has to be freed explicitly to avoid a memory leak. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: resolved forky: resolved (fixed in

CVE-2022-48963 [MEDIUM] CVE-2022-48963: linux - In the Linux kernel, the following vulnerability has been resolved: net: wwan: ... In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipc_mux_init() When failed to alloc ipc_mux->ul_adb.pp_qlt in ipc_mux_init(), ipc_mux is not released. Scope: local bookworm: resolved (fixed in 6.1.4-1) bullseye: resolved forky: resolved (fixed in 6.1.4-1) sid: resolved (fixed in 6.1.4-1) trixie: resolved (fixed

CVE-2021-47658 [MEDIUM] CVE-2021-47658: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm:... In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a potential gpu_metrics_table memory leak Memory is allocated for gpu_metrics_table in renoir_init_smc_tables(), but not freed in int smu_v12_0_fini_smc_tables(). Free it! Scope: local bookworm: resolved (fixed in 5.17.3-1) bullseye: open forky: resolved (fixed in 5.17.3-1) sid: reso