Debian Linux vulnerabilities

CVE-2024-53236 [MEDIUM] CVE-2024-53236: linux - In the Linux kernel, the following vulnerability has been resolved: xsk: Free s... In the Linux kernel, the following vulnerability has been resolved: xsk: Free skb when TX metadata options are invalid When a new skb is allocated for transmitting an xsk descriptor, i.e., for every non-multibuf descriptor or the first frag of a multibuf descriptor, but the descriptor is later found to have invalid options set for the TX metadata, the new skb is nev

CVE-2022-49996 [MEDIUM] CVE-2022-49996: linux - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ... In the Linux kernel, the following vulnerability has been resolved: btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() In btrfs_get_dev_args_from_path(), btrfs_get_bdev_and_sb() can fail if the path is invalid. In this case, btrfs_get_dev_args_from_path() returns directly without freeing args->uuid and args->fsid allocated before, which causes memory

CVE-2023-52937 [MEDIUM] CVE-2023-52937: linux - In the Linux kernel, the following vulnerability has been resolved: HV: hv_ball... In the Linux kernel, the following vulnerability has been resolved: HV: hv_balloon: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. Scope: local boo

CVE-2021-47417 [MEDIUM] CVE-2021-47417: linux - In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix... In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix memory leak in strset Free struct strset itself, not just its internal parts. Scope: local bookworm: resolved (fixed in 5.14.12-1) bullseye: resolved forky: resolved (fixed in 5.14.12-1) sid: resolved (fixed in 5.14.12-1) trixie: resolved (fixed in 5.14.12-1)

CVE-2021-47420 [MEDIUM] CVE-2021-47420: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd:... In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix a potential ttm->sg memory leak Memory is allocated for ttm->sg by kmalloc in kfd_mem_dmamap_userptr, but isn't freed by kfree in kfd_mem_dmaunmap_userptr. Free it! Scope: local bookworm: resolved (fixed in 5.14.12-1) bullseye: resolved forky: resolved (fixed in 5.14.12-1) sid: resol

CVE-2023-52684 [MEDIUM] CVE-2023-52684: linux - In the Linux kernel, the following vulnerability has been resolved: firmware: q... In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: qseecom: fix memory leaks in error paths Fix instances of returning error codes directly instead of jumping to the relevant labels where memory allocated for the SCM calls would be freed. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.7.7-1) sid: resol

CVE-2021-47532 [MEDIUM] CVE-2021-47532: linux - In the Linux kernel, the following vulnerability has been resolved: drm/msm/dev... In the Linux kernel, the following vulnerability has been resolved: drm/msm/devfreq: Fix OPP refcnt leak Scope: local bookworm: resolved (fixed in 5.15.15-1) bullseye: resolved forky: resolved (fixed in 5.15.15-1) sid: resolved (fixed in 5.15.15-1) trixie: resolved (fixed in 5.15.15-1)

CVE-2025-22095 [MEDIUM] CVE-2025-22095: linux - In the Linux kernel, the following vulnerability has been resolved: PCI: brcmst... In the Linux kernel, the following vulnerability has been resolved: PCI: brcmstb: Fix error path after a call to regulator_bulk_get() If the regulator_bulk_get() returns an error and no regulators are created, we need to set their number to zero. If we don't do this and the PCIe link up fails, a call to the regulator_bulk_free() will result in a kernel panic. While

CVE-2022-50547 [MEDIUM] CVE-2022-50547: linux - In the Linux kernel, the following vulnerability has been resolved: media: solo... In the Linux kernel, the following vulnerability has been resolved: media: solo6x10: fix possible memory leak in solo_sysfs_init() If device_register() returns error in solo_sysfs_init(), the name allocated by dev_set_name() need be freed. As comment of device_register() says, it should use put_device() to give up the reference in the error path. So fix this by call

CVE-2023-53096 [MEDIUM] CVE-2023-53096: linux - In the Linux kernel, the following vulnerability has been resolved: interconnec... In the Linux kernel, the following vulnerability has been resolved: interconnect: fix mem leak when freeing nodes The node link array is allocated when adding links to a node but is not deallocated when nodes are destroyed. Scope: local bookworm: resolved (fixed in 6.1.25-1) bullseye: resolved (fixed in 5.10.178-1) forky: resolved (fixed in 6.1.25-1) sid: resolved (

CVE-2023-53097 [MEDIUM] CVE-2023-53097: linux - In the Linux kernel, the following vulnerability has been resolved: powerpc/iom... In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. Scope: local book

CVE-2023-53092 [MEDIUM] CVE-2023-53092: linux - In the Linux kernel, the following vulnerability has been resolved: interconnec... In the Linux kernel, the following vulnerability has been resolved: interconnect: exynos: fix node leak in probe PM QoS error path Make sure to add the newly allocated interconnect node to the provider before adding the PM QoS request so that the node is freed on errors. Scope: local bookworm: resolved (fixed in 6.1.25-1) bullseye: resolved forky: resolved (fixed in

CVE-2023-53650 [MEDIUM] CVE-2023-53650: linux - In the Linux kernel, the following vulnerability has been resolved: fbdev: omap... In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() If 'mipid_detect()' fails, we must free 'md' to avoid a memory leak. Scope: local bookworm: resolved (fixed in 6.1.52-1) bullseye: resolved (fixed in 5.10.191-1) forky: resolved (fixed in 6.4.4-1) sid: resolved (fixed in 6.4.4

CVE-2022-49857 [MEDIUM] CVE-2022-49857: linux - In the Linux kernel, the following vulnerability has been resolved: net: marvel... In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() When prestera_sdma_switch_init() failed, the memory pointed to by sw->rxtx isn't released. Fix it. Only be compiled, not be tested. Scope: local bookworm: resolved (fixed in 6.0.10-1) bullseye: resolved (fixed in 5.10.158-1) fork

CVE-2022-49813 [MEDIUM] CVE-2022-49813: linux - In the Linux kernel, the following vulnerability has been resolved: net: ena: F... In the Linux kernel, the following vulnerability has been resolved: net: ena: Fix error handling in ena_init() The ena_init() won't destroy workqueue created by create_singlethread_workqueue() when pci_register_driver() failed. Call destroy_workqueue() when pci_register_driver() failed to prevent the resource leak. Scope: local bookworm: resolved (fixed in 6.0.10-1)

CVE-2022-49794 [MEDIUM] CVE-2022-49794: linux - In the Linux kernel, the following vulnerability has been resolved: iio: adc: a... In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() If iio_trigger_register() returns error, it should call iio_trigger_free() to give up the reference that hold in iio_trigger_alloc(), so that it can call iio_trig_release() to free memory when the refcount hit to 0. Scope: l

CVE-2022-49891 [MEDIUM] CVE-2022-49891: linux - In the Linux kernel, the following vulnerability has been resolved: tracing: kp... In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() test_gen_kprobe_cmd() only free buf in fail path, hence buf will leak when there is no failure. Move kfree(buf) from fail path to common path to prevent the memleak. The same reason and solution in test_gen_kretprobe_cmd(). unrefere

CVE-2025-37788 [MEDIUM] CVE-2025-37788: linux - In the Linux kernel, the following vulnerability has been resolved: cxgb4: fix ... In the Linux kernel, the following vulnerability has been resolved: cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path In the for loop used to allocate the loc_array and bmap for each port, a memory leak is possible when the allocation for loc_array succeeds, but the allocation for bmap fails. This is because when the control flow goes to the label fr

CVE-2022-50208 [MEDIUM] CVE-2022-50208: linux - In the Linux kernel, the following vulnerability has been resolved: soc: amlogi... In the Linux kernel, the following vulnerability has been resolved: soc: amlogic: Fix refcount leak in meson-secure-pwrc.c In meson_secure_pwrc_probe(), there is a refcount leak in one fail path. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: resolved (fixed in 5.10.140-1) forky: resolved (fixed in 6.0.2-1) sid: resolved (fixed in 6.0.2-1) trixie: reso

CVE-2022-49864 [MEDIUM] CVE-2022-49864: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd:... In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() ./drivers/gpu/drm/amd/amdkfd/kfd_migrate.c:985:58-62: ERROR: p is NULL but dereferenced. Scope: local bookworm: resolved (fixed in 6.0.10-1) bullseye: resolved forky: resolved (fixed in 6.0.10-1) sid: resolved (fixed in 6.0.10-1) trixi