Debian Linux vulnerabilities

CVE-2024-27064 [MEDIUM] CVE-2024-27064: linux - In the Linux kernel, the following vulnerability has been resolved: netfilter: ... In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain If nft_netdev_register_hooks() fails, the memory associated with nft_stats is not freed, causing a memory leak. This patch fixes it by moving nft_stats_alloc() down after nft_netdev_register_hooks() succeeds. Scope: local bookworm: resolv

CVE-2023-52563 [MEDIUM] CVE-2023-52563: linux - In the Linux kernel, the following vulnerability has been resolved: drm/meson: ... In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix memory leak on ->hpd_notify callback The EDID returned by drm_bridge_get_edid() needs to be freed. Scope: local bookworm: resolved (fixed in 6.1.64-1) bullseye: resolved forky: resolved (fixed in 6.5.6-1) sid: resolved (fixed in 6.5.6-1) trixie: resolved (fixed in 6.5.6-1)

CVE-2021-47057 [MEDIUM] CVE-2021-47057: linux - In the Linux kernel, the following vulnerability has been resolved: crypto: sun... In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Fix memory leak of object d when dma_iv fails to map In the case where the dma_iv mapping fails, the return error path leaks the memory allocated to object d. Fix this by adding a new error return label and jumping to this to ensure d is free'd before the return. Addresses-Coverit

CVE-2024-38632 [MEDIUM] CVE-2024-38632: linux - In the Linux kernel, the following vulnerability has been resolved: vfio/pci: f... In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix potential memory leak in vfio_intx_enable() If vfio_irq_ctx_alloc() failed will lead to 'name' memory leak. Scope: local bookworm: resolved (fixed in 6.1.115-1) bullseye: open forky: resolved (fixed in 6.9.7-1) sid: resolved (fixed in 6.9.7-1) trixie: resolved (fixed in 6.9.7-1)

CVE-2022-49233 [MEDIUM] CVE-2022-49233: linux - In the Linux kernel, the following vulnerability has been resolved: drm/amd/dis... In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Call dc_stream_release for remove link enc assignment [Why] A porting error resulted in the stream assignment for the link being retained without being released - a memory leak. [How] Fix the porting error by adding back the dc_stream_release() intended as part of the original patch

CVE-2024-36967 [MEDIUM] CVE-2024-36967: linux - In the Linux kernel, the following vulnerability has been resolved: KEYS: trust... In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak in tpm2_key_encode() 'scratch' is never freed. Fix this by calling kfree() in the success, and in the error case. Scope: local bookworm: resolved (fixed in 6.1.94-1) bullseye: resolved forky: resolved (fixed in 6.8.11-1) sid: resolved (fixed in 6.8.11-1) trixie: resolv

CVE-2022-48907 [MEDIUM] CVE-2022-48907: linux - In the Linux kernel, the following vulnerability has been resolved: auxdisplay:... In the Linux kernel, the following vulnerability has been resolved: auxdisplay: lcd2s: Fix memory leak in ->remove() Once allocated the struct lcd2s_data is never freed. Fix the memory leak by switching to devm_kzalloc(). Scope: local bookworm: resolved (fixed in 5.16.14-1) bullseye: resolved forky: resolved (fixed in 5.16.14-1) sid: resolved (fixed in 5.16.14-1) tr

CVE-2023-53004 [MEDIUM] CVE-2023-53004: linux - In the Linux kernel, the following vulnerability has been resolved: ovl: fix tm... In the Linux kernel, the following vulnerability has been resolved: ovl: fix tmpfile leak Missed an error cleanup. Scope: local bookworm: resolved (fixed in 6.1.11-1) bullseye: resolved forky: resolved (fixed in 6.1.11-1) sid: resolved (fixed in 6.1.11-1) trixie: resolved (fixed in 6.1.11-1)

CVE-2023-52902 [MEDIUM] CVE-2023-52902: linux - In the Linux kernel, the following vulnerability has been resolved: nommu: fix ... In the Linux kernel, the following vulnerability has been resolved: nommu: fix memory leak in do_mmap() error path The preallocation of the maple tree nodes may leak if the error path to "error_just_free" is taken. Fix this by moving the freeing of the maple tree nodes to a shared location for all error paths. Scope: local bookworm: resolved (fixed in 6.1.8-1) bulls

CVE-2022-50138 [MEDIUM] CVE-2022-50138: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: ... In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() __qedr_alloc_mr() allocates a memory chunk for "mr->info.pbl_table" with init_mr_info(). When rdma_alloc_tid() and rdma_register_tid() fail, "mr" is released while "mr->info.pbl_table" is not released, which will lead to a memory leak. We sho

CVE-2021-47529 [MEDIUM] CVE-2021-47529: linux - In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Fi... In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Fix memory leaks in error handling path Should an error occur (invalid TLV len or memory allocation failure), the memory already allocated in 'reduce_power_data' should be freed before returning, otherwise it is leaking. Scope: local bookworm: resolved (fixed in 5.15.15-1) bullseye: resolve

CVE-2022-50175 [MEDIUM] CVE-2022-50175: linux - In the Linux kernel, the following vulnerability has been resolved: media: tw68... In the Linux kernel, the following vulnerability has been resolved: media: tw686x: Fix memory leak in tw686x_video_init video_device_alloc() allocates memory for vdev, when video_register_device() fails, it doesn't release the memory and leads to memory leak, call video_device_release() to fix this. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: resolv

CVE-2022-49757 [MEDIUM] CVE-2022-49757: linux - In the Linux kernel, the following vulnerability has been resolved: EDAC/highba... In the Linux kernel, the following vulnerability has been resolved: EDAC/highbank: Fix memory leak in highbank_mc_probe() When devres_open_group() fails, it returns -ENOMEM without freeing memory allocated by edac_mc_alloc(). Call edac_mc_free() on the error handling path to avoid a memory leak. [ bp: Massage commit message. ] Scope: local bookworm: resolved (fixed

CVE-2022-49836 [MEDIUM] CVE-2022-49836: linux - In the Linux kernel, the following vulnerability has been resolved: siox: fix p... In the Linux kernel, the following vulnerability has been resolved: siox: fix possible memory leak in siox_device_add() If device_register() returns error in siox_device_add(), the name allocated by dev_set_name() need be freed. As comment of device_register() says, it should use put_device() to give up the reference in the error path. So fix this by calling put_dev

CVE-2022-49809 [MEDIUM] CVE-2022-49809: linux - In the Linux kernel, the following vulnerability has been resolved: net/x25: Fi... In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix skb leak in x25_lapb_receive_frame() x25_lapb_receive_frame() using skb_copy() to get a private copy of skb, the new skb should be freed in the undersized/fragmented skb error handling path. Otherwise there is a memory leak. Scope: local bookworm: resolved (fixed in 6.0.10-1) bullseye:

CVE-2023-53617 [MEDIUM] CVE-2023-53617: linux - In the Linux kernel, the following vulnerability has been resolved: soc: aspeed... In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: socinfo: Add kfree for kstrdup Add kfree() in the later error handling in order to avoid memory leak. Scope: local bookworm: resolved (fixed in 6.1.52-1) bullseye: resolved forky: resolved (fixed in 6.4.13-1) sid: resolved (fixed in 6.4.13-1) trixie: resolved (fixed in 6.4.13-1)

CVE-2022-49854 [MEDIUM] CVE-2022-49854: linux - In the Linux kernel, the following vulnerability has been resolved: mctp: Fix a... In the Linux kernel, the following vulnerability has been resolved: mctp: Fix an error handling path in mctp_init() If mctp_neigh_init() return error, the routes resources should be released in the error handling path. Otherwise some resources leak. Scope: local bookworm: resolved (fixed in 6.0.10-1) bullseye: resolved forky: resolved (fixed in 6.0.10-1) sid: resolv

CVE-2022-49953 [MEDIUM] CVE-2022-49953: linux - In the Linux kernel, the following vulnerability has been resolved: iio: light:... In the Linux kernel, the following vulnerability has been resolved: iio: light: cm3605: Fix an error handling path in cm3605_probe() The commit in Fixes also introduced a new error handling path which should goto the existing error handling path. Otherwise some resources leak. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: resolved forky: resolved (fix

CVE-2025-37941 [MEDIUM] CVE-2025-37941: linux - In the Linux kernel, the following vulnerability has been resolved: ASoC: codec... In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() When snd_soc_dapm_new_controls() or snd_soc_dapm_add_routes() fails, wcd937x_soc_codec_probe() returns without releasing 'wcd937x->clsh_info', which is allocated by wcd_clsh_ctrl_alloc. Add wcd_clsh_ctrl_free() to preven

CVE-2025-37982 [MEDIUM] CVE-2025-37982: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: wl125... In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work The skb dequeued from tx_queue is lost when wl1251_ps_elp_wakeup fails with a -ETIMEDOUT error. Fix that by queueing the skb back to tx_queue. Scope: local bookworm: resolved (fixed in 6.1.135-1) bullseye: resolved (fixed in 5.10.237-1) forky: resolved