CVE Vulnerability Catalog

In the Linux kernel, a vulnerability related to a reference leak in mtk_mdp_remove() has been fixed. The issue was resolved by adding platform_device_put() to prevent the reference leak.

A vulnerability has been identified in the Classmate laptop driver in the Linux kernel, related to missing NULL pointer checks. In several places, code using the accel object may run before the address of that object is stored in the input device driver data.

A vulnerability in the Linux kernel related to validating rounded allocations in DRM_BUDDY_CONTIGUOUS_ALLOCATION has been resolved. The issue involved the requested size being rounded up to the next power of two, which could lead to errors.

A vulnerability has been identified in the Linux kernel within the USB pegasus module, which involves filling URBs with hardcoded endpoint pipes without verifying their descriptors. This may lead to improper functioning of USB devices.

A vulnerability in the Linux kernel related to error handling during initialization in the HID: hid-pl module has been resolved. Errors must be reported to avoid dereferencing a NULL pointer when FF is first used.

A vulnerability has been identified in the Linux kernel related to missing initializations in the code handling CIFS request replay. Some parts of the code lacked the necessary initializations, which could lead to improper functioning.

A vulnerability has been identified and resolved in the Linux kernel. The issue concerns the fbcon_open() function, which, if it fails, does not set the info->fbcon_par pointer, leading to later dereferencing of a NULL pointer.

A vulnerability has been identified and resolved in the Linux kernel. It concerns the HID Magic Mouse, which can cause system crashes when the input pointer is missing.

A vulnerability in the Linux kernel related to freemap adjustments when adding extended attributes (xattrs) to leaf blocks has been resolved. This issue caused an assertion failure in the freemap adjustment code after approximately 20 minutes of running on virtual machines.

In the Linux kernel, a vulnerability related to the pstore: ram_core function has been fixed, which incorrectly returned a success pointer when the vmap() function failed.

A vulnerability has been identified in the Linux kernel related to ARM processor errors, occurring when the BIOS generates a very small or incomplete error. This can lead to improper memory dereferencing.

A vulnerability has been identified in the Linux kernel related to the failure to free memory in case of an error. Specifically, the screen buffer fbi->fb.screen_buffer is allocated using dma_alloc_coherent() but is not freed if an error occurs.

A vulnerability in the Linux kernel leads to a General Protection Fault (GPF) in the write_page() function during array resize. This issue is caused by a use-after-free race between bitmap_daemon_work().

In the Linux kernel, a vulnerability related to a resource leak in the cx25821_dev_setup() function has been fixed. The issue occurred when ioremap() failed, leading to the memory region obtained by cx25821_get_resources() not being released.

A vulnerability in the Linux kernel related to double free in the pruss_clk_mux_setup() function has been resolved. The issue occurred during the call to devm_add_action_or_reset(), which triggered pruss_of_free_clk_provider() on error.

A vulnerability in the Linux kernel related to reserving slots for the clk_hw structure in the 9FGV0841 has been resolved. The issue concerns the lack of sufficient slots for eight outputs, which may lead to out-of-bounds writes.

A vulnerability in the Linux kernel related to swapped parameters in the pci_{primary/secondary}_epc_epf_unlink() functions has been resolved.

A vulnerability has been identified in the Linux kernel within the dpaa2-switch driver, which involves a lack of validation for the num_ifs value against the maximum allowed number of interfaces. This can lead to out-of-bounds writes.

In the Linux kernel, a vulnerability related to a 'scheduling while atomic' bug in the mlx5e_ipsec_init_macs() function has been fixed. This was resolved by replacing mlx5_query_mac_address() with ether_addr_copy() to directly obtain the local MAC address.

A vulnerability has been identified in the Linux kernel within the rockchip module that may lead to ERR_PTR dereference in the rga_buf_init() function. The issue occurs when rga_get_frame() returns ERR_PTR(-EINVAL) due to an unsupported or invalid buffer type.