Debian Linux vulnerabilities

CVE-2022-50321 [MEDIUM] CVE-2022-50321: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: brcmf... In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() The brcmf_netdev_start_xmit() returns NETDEV_TX_OK without freeing skb in case of pskb_expand_head() fails, add dev_kfree_skb() to fix it. Compile tested only. Scope: local bookworm: resolved (fixed in 6.1.20-1) bullseye: resolve

CVE-2022-50512 [MEDIUM] CVE-2022-50512: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: fix p... In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential memory leak in ext4_fc_record_regions() As krealloc may return NULL, in this case 'state->fc_regions' may not be freed by krealloc, but 'state->fc_regions' already set NULL. Then will lead to 'state->fc_regions' memory leak. Scope: local bookworm: resolved (fixed in 6.0.3-1) bull

CVE-2022-50427 [MEDIUM] CVE-2022-50427: linux - In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97:... In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() If device_register() fails in snd_ac97_dev_register(), it should call put_device() to give up reference, or the name allocated in dev_set_name() is leaked. Scope: local bookworm: resolved (fixed in 6.0.7-1) bullseye: resolved (fixed in

CVE-2023-53279 [MEDIUM] CVE-2023-53279: linux - In the Linux kernel, the following vulnerability has been resolved: misc: vmw_b... In the Linux kernel, the following vulnerability has been resolved: misc: vmw_balloon: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. Scope: local

CVE-2023-53264 [MEDIUM] CVE-2023-53264: linux - In the Linux kernel, the following vulnerability has been resolved: clk: imx: c... In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe Use devm_of_iomap() instead of of_iomap() to automatically handle the unused ioremap region. If any error occurs, regions allocated by kzalloc() will leak, but using devm_kzalloc() instead will automatically free the memory using dev

CVE-2023-53173 [MEDIUM] CVE-2023-53173: linux - In the Linux kernel, the following vulnerability has been resolved: tty: pcn_ua... In the Linux kernel, the following vulnerability has been resolved: tty: pcn_uart: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. Scope: local book

CVE-2022-50294 [MEDIUM] CVE-2022-50294: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: liber... In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in lbs_init_adapter() When kfifo_alloc() failed in lbs_init_adapter(), cmd buffer is not released. Add free memory to processing error path. Scope: local bookworm: resolved (fixed in 6.1.20-1) bullseye: resolved (fixed in 5.10.178-1) forky: resolved (fixed in 6.1.20-1

CVE-2022-50275 [MEDIUM] CVE-2022-50275: linux - In the Linux kernel, the following vulnerability has been resolved: drm/radeon:... In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpi_put_table() to fix memory leak When the radeon driver reads the bios information from ACPI table in radeon_acpi_vfct_bios(), it misses to call acpi_put_table() to release the ACPI memory after the init, so add acpi_put_table() properly to fix the memory leak. v2: fix

CVE-2022-50460 [MEDIUM] CVE-2022-50460: linux - In the Linux kernel, the following vulnerability has been resolved: cifs: Fix x... In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_flock() If not flock, before return -ENOLCK, should free the xid, otherwise, the xid will be leaked. Scope: local bookworm: resolved (fixed in 6.0.6-1) bullseye: resolved (fixed in 5.10.158-1) forky: resolved (fixed in 6.0.6-1) sid: resolved (fixed in 6.0.6-1) trixie: reso

CVE-2025-38549 [MEDIUM] CVE-2025-38549: linux - In the Linux kernel, the following vulnerability has been resolved: efivarfs: F... In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths When processing mount options, efivarfs allocates efivarfs_fs_info (sfi) early in fs_context initialization. However, sfi is associated with the superblock and typically freed when the superblock is destroyed. If the fs_context

CVE-2023-53466 [MEDIUM] CVE-2023-53466: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:... In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit Always purge mcu skb queues in mt7915_mcu_exit routine even if mt7915_firmware_state fails. Scope: local bookworm: resolved (fixed in 6.1.20-1) bullseye: open forky: resolved (fixed in 6.1.20-1) sid: resolved (fixed in 6.1.20-1) trixie: resolved

CVE-2023-53370 [MEDIUM] CVE-2023-53370: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:... In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix memory leak in mes self test The fences associated with mes queue have to be freed up during amdgpu_ring_fini. Scope: local bookworm: resolved (fixed in 6.1.52-1) bullseye: open forky: resolved (fixed in 6.4.13-1) sid: resolved (fixed in 6.4.13-1) trixie: resolved (fixed in 6.4.13-1)

CVE-2022-50284 [MEDIUM] CVE-2022-50284: linux - In the Linux kernel, the following vulnerability has been resolved: ipc: fix me... In the Linux kernel, the following vulnerability has been resolved: ipc: fix memory leak in init_mqueue_fs() When setup_mq_sysctls() failed in init_mqueue_fs(), mqueue_inode_cachep is not released. In order to fix this issue, the release path is reordered. Scope: local bookworm: resolved (fixed in 6.1.4-1) bullseye: resolved forky: resolved (fixed in 6.1.4-1) sid: r

CVE-2025-38228 [MEDIUM] CVE-2025-38228: linux - In the Linux kernel, the following vulnerability has been resolved: media: imag... In the Linux kernel, the following vulnerability has been resolved: media: imagination: fix a potential memory leak in e5010_probe() Add video_device_release() to release the memory allocated by video_device_alloc() if something goes wrong. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 6.12.35-1) sid: resolved (fixed in 6.12.35-1) trix

CVE-2023-53611 [MEDIUM] CVE-2023-53611: linux - In the Linux kernel, the following vulnerability has been resolved: ipmi_si: fi... In the Linux kernel, the following vulnerability has been resolved: ipmi_si: fix a memleak in try_smi_init() Kmemleak reported the following leak info in try_smi_init(): unreferenced object 0xffff00018ecf9400 (size 1024): comm "modprobe", pid 2707763, jiffies 4300851415 (age 773.308s) backtrace: [] __kmalloc+0x4b8/0x7b0 [] try_smi_init+0x148/0x5dc [ipmi_si] [] 0xfff

CVE-2023-53330 [MEDIUM] CVE-2023-53330: linux - In the Linux kernel, the following vulnerability has been resolved: caif: fix m... In the Linux kernel, the following vulnerability has been resolved: caif: fix memory leak in cfctrl_linkup_request() When linktype is unknown or kzalloc failed in cfctrl_linkup_request(), pkt is not released. Add release process to error path. Scope: local bookworm: resolved (fixed in 6.1.7-1) bullseye: resolved (fixed in 5.10.178-1) forky: resolved (fixed in 6.1.7-

CVE-2023-53407 [MEDIUM] CVE-2023-53407: linux - In the Linux kernel, the following vulnerability has been resolved: USB: gadget... In the Linux kernel, the following vulnerability has been resolved: USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which handles all of the logic at once. Scope:

CVE-2023-53435 [MEDIUM] CVE-2023-53435: linux - In the Linux kernel, the following vulnerability has been resolved: cassini: Fi... In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of cas_init_one() cas_saturn_firmware_init() allocates some memory using vmalloc(). This memory is freed in the .remove() function but not it the error handling path of the probe. Add the missing vfree() to avoid a memory leak, should an error oc

CVE-2023-53443 [MEDIUM] CVE-2023-53443: linux - In the Linux kernel, the following vulnerability has been resolved: mfd: arizon... In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak In arizona_clk32k_enable(), we should use pm_runtime_resume_and_get() as pm_runtime_get_sync() will increase the refcnt even when it returns an error. Scope: local bookworm: resolved (fixed in 6.1.20-1) bullseye: resolved (fixed in

CVE-2023-53436 [MEDIUM] CVE-2023-53436: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: snic:... In the Linux kernel, the following vulnerability has been resolved: scsi: snic: Fix possible memory leak if device_add() fails If device_add() returns error, the name allocated by dev_set_name() needs be freed. As the comment of device_add() says, put_device() should be used to give up the reference in the error path. So fix this by calling put_device(), then the na