Debian Linux vulnerabilities

CVE-2025-38015 [MEDIUM] CVE-2025-38015: linux - In the Linux kernel, the following vulnerability has been resolved: dmaengine: ... In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix memory leak in error handling path of idxd_alloc Memory allocated for idxd is not freed if an error occurs during idxd_alloc(). To fix it, free the allocated memory in the reverse order of allocation before exiting the function in case of an error. Scope: local bookworm: resolve

CVE-2022-50143 [MEDIUM] CVE-2022-50143: linux - In the Linux kernel, the following vulnerability has been resolved: intel_th: F... In the Linux kernel, the following vulnerability has been resolved: intel_th: Fix a resource leak in an error handling path If an error occurs after calling 'pci_alloc_irq_vectors()', 'pci_free_irq_vectors()' must be called as already done in the remove function. Scope: local bookworm: resolved (fixed in 6.0.2-1) bullseye: resolved (fixed in 5.10.140-1) forky: resol

CVE-2025-39679 [MEDIUM] CVE-2025-39679: linux - In the Linux kernel, the following vulnerability has been resolved: drm/nouveau... In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). When the nvif_vmm_type is invalid, we will return error directly without freeing the args in nvif_vmm_ctor(), which leading a memory leak. Fix it by setting the ret -EINVAL and goto done. Scope: local bookworm: resolved bullseye: resolv

CVE-2022-50088 [MEDIUM] CVE-2022-50088: linux - In the Linux kernel, the following vulnerability has been resolved: mm/damon/re... In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: fix potential memory leak in damon_reclaim_init() damon_reclaim_init() allocates a memory chunk for ctx with damon_new_ctx(). When damon_select_ops() fails, ctx is not released, which will lead to a memory leak. We should release the ctx with damon_destroy_ctx() when damon_select_o

CVE-2023-53546 [MEDIUM] CVE-2023-53546: linux - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: D... In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx when mlx5_cmd_exec failed in mlx5dr_cmd_create_reformat_ctx, the memory pointed by 'in' is not released, which will cause memory leak. Move memory release after mlx5_cmd_exec. Scope: local bookworm: resolved (fixed in 6.1.52-1) bullseye

CVE-2022-50348 [MEDIUM] CVE-2022-50348: linux - In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a... In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdup_user() call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks. Scope: local bookworm: resolved (fixed in 6.0.3-1) bullseye: resolved (fixed in 5.10.158-1) forky: resolved (fixed in 6.0

CVE-2023-53505 [MEDIUM] CVE-2023-53505: linux - In the Linux kernel, the following vulnerability has been resolved: clk: tegra:... In the Linux kernel, the following vulnerability has been resolved: clk: tegra: tegra124-emc: Fix potential memory leak The tegra and tegra needs to be freed in the error handling path, otherwise it will be leaked. Scope: local bookworm: resolved (fixed in 6.1.52-1) bullseye: resolved (fixed in 5.10.191-1) forky: resolved (fixed in 6.4.4-1) sid: resolved (fixed in 6

CVE-2022-50537 [MEDIUM] CVE-2022-50537: linux - In the Linux kernel, the following vulnerability has been resolved: firmware: r... In the Linux kernel, the following vulnerability has been resolved: firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() In rpi_firmware_probe(), if mbox_request_channel() fails, the 'fw' will not be freed through rpi_firmware_delete(), fix this leak by calling kfree() in the error path. Scope: local bookworm: resolved (fixed in 6.1.4-1) bullseye:

CVE-2022-50416 [MEDIUM] CVE-2022-50416: linux - In the Linux kernel, the following vulnerability has been resolved: irqchip/wpc... In the Linux kernel, the following vulnerability has been resolved: irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() If of_iomap() failed, 'aic' should be freed before return. Otherwise there is a memory leak. Scope: local bookworm: resolved (fixed in 6.1.4-1) bullseye: resolved forky: resolved (fixed in 6.1.4-1) sid: resolved (fixed in 6.1.4-1) trixie: res

CVE-2023-53371 [MEDIUM] CVE-2023-53371: linux - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: ... In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create The memory pointed to by the fs->any pointer is not freed in the error path of mlx5e_fs_tt_redirect_any_create, which can lead to a memory leak. Fix by freeing the memory in the error path, thereby making the error path identical to mlx5e

CVE-2023-53267 [MEDIUM] CVE-2023-53267: linux - In the Linux kernel, the following vulnerability has been resolved: driver: soc... In the Linux kernel, the following vulnerability has been resolved: driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event() The kfree() should be called when memory fails to be allocated for cb_data in xlnx_add_cb_for_notify_event(), otherwise there will be a memory leak, so add kfree() to fix it. Scope: local bookworm: resolved (fixed in 6.1.20-1) bu

CVE-2023-53195 [MEDIUM] CVE-2023-53195: linux - In the Linux kernel, the following vulnerability has been resolved: mlxsw: mini... In the Linux kernel, the following vulnerability has been resolved: mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init The line cards array is not freed in the error path of mlxsw_m_linecards_init(), which can lead to a memory leak. Fix by freeing the array in the error path, thereby making the error path identical to mlxsw_m_linecards_fini(). Scope

CVE-2022-50418 [MEDIUM] CVE-2022-50418: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: ath11... In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register() mhi_alloc_controller() allocates a memory space for mhi_ctrl. When gets some error, mhi_ctrl should be freed with mhi_free_controller(). But when ath11k_mhi_read_addr_from_dt() fails, the function returns without calling mhi_free_

CVE-2023-53423 [MEDIUM] CVE-2023-53423: linux - In the Linux kernel, the following vulnerability has been resolved: objtool: Fi... In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in create_static_call_sections() strdup() allocates memory for key_name. We need to release the memory in the following error paths. Add free() to avoid memory leak. Scope: local bookworm: resolved (fixed in 6.1.20-1) bullseye: resolved (fixed in 5.10.178-1) forky: resolved

CVE-2023-53512 [MEDIUM] CVE-2023-53512: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3s... In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix a memory leak Add a forgotten kfree(). Scope: local bookworm: resolved (fixed in 6.1.20-1) bullseye: resolved (fixed in 5.10.178-1) forky: resolved (fixed in 6.1.20-1) sid: resolved (fixed in 6.1.20-1) trixie: resolved (fixed in 6.1.20-1)

CVE-2022-50254 [MEDIUM] CVE-2022-50254: linux - In the Linux kernel, the following vulnerability has been resolved: media: ov88... In the Linux kernel, the following vulnerability has been resolved: media: ov8865: Fix an error handling path in ov8865_probe() The commit in Fixes also introduced some new error handling which should goto the existing error handling path. Otherwise some resources leak. Scope: local bookworm: resolved (fixed in 6.0.7-1) bullseye: resolved forky: resolved (fixed in 6

CVE-2025-39834 [MEDIUM] CVE-2025-39834: linux - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: H... In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow When an invalid stc_type is provided, the function allocates memory for shared_stc but jumps to unlock_and_out without freeing it, causing a memory leak. Fix by jumping to free_shared_stc label instead to ensure proper cleanu

CVE-2025-71153 [MEDIUM] CVE-2025-71153: linux - In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix ... In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix memory leak in get_file_all_info() In get_file_all_info(), if vfs_getattr() fails, the function returns immediately without freeing the allocated filename, leading to a memory leak. Fix this by freeing the filename before returning in this error case. Scope: local bookworm: resolved bulls

CVE-2021-47504 [MEDIUM] CVE-2021-47504: linux - In the Linux kernel, the following vulnerability has been resolved: io_uring: e... In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure task_work gets run as part of cancelations If we successfully cancel a work item but that work item needs to be processed through task_work, then we can be sleeping uninterruptibly in io_uring_cancel_generic() and never process it. Hence we don't make forward progress and we end up

CVE-2013-4516 [MEDIUM] CVE-2013-4516: linux - The mp_get_count function in drivers/staging/sb105x/sb_pci_mp.c in the Linux ker... The mp_get_count function in drivers/staging/sb105x/sb_pci_mp.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call. Scope: local bookworm: resolved (fixed in 3.12-1) bullseye: resolved (fixed in 3.12-1) forky: resolved (fixed in 3.1