CVE Vulnerability Catalog

A vulnerability related to out-of-bounds array access in the ntb_hw_switchtec module has been fixed in the Linux kernel. The patch protects against invalid index access to mw_sizes, which could lead to unexpected system behavior.

A vulnerability has been identified in the Linux kernel related to manipulating the 'mfd_of_node_list'. A mutex has been added to ensure safety during access and modification of this list, preventing potential crashes.

A vulnerability has been identified in the Linux kernel related to resource leaks during early registration failures. A recent commit fixed most cases, but for some reason, it left out the first error path, which still leaks resources.

A vulnerability in the Linux kernel has been resolved by moving the wait_on_sem() function out of the spinlock. The issue occurred with iommu.strict=1, potentially leading to system lockups under high load conditions.

A vulnerability related to the eDP issue in the drm/amd/display module has been fixed in the Linux kernel, which required adding a function hook check before use.

A vulnerability has been identified in the Linux kernel within the ALSA usb-audio module, concerning the lack of size verification for URB packets during playback silencing. This issue may lead to uncontrolled writes outside the allocated buffer.

A vulnerability has been identified in the Linux kernel related to the handling of fake USB devices that can send their own report descriptors. If the input_mapping() hook is not called, the pm->input_ep82 pointer remains NULL, leading to a system crash.

A vulnerability has been identified in the Linux kernel related to improper reference counting management in the 'xfrm_state' structure. The issue occurs during the NETDEV_UNREGISTER event, leading to reference count leaks.

A vulnerability in the Linux kernel related to vhost has been resolved by moving the vdpa group bound check to vhost_vdpa. This reduces duplication and lowers the risk of a parent driver missing them.

A vulnerability in the Linux kernel has been fixed, which involved a NULL pointer dereference in the process_metadata_update() function. The issue occurred in the wait_event() macro, which improperly handled the 'thread' pointer.

A vulnerability in the Linux kernel has been resolved that allowed two query interface operations to concurrently update interfaces. A locking mechanism has been introduced to prevent these races.

A vulnerability in the Linux kernel related to exception handling in SCSI for UFS has been resolved. The issue was the lack of proper flushing of exception handling work during system suspend when the runtime power management level is set to zero.

A vulnerability related to APEI/GHES has been resolved in the Linux kernel, which could lead to the allocation of overly large records. The logic in the ghes_new() function checks that records do not exceed the maximum size of GHES_ESTATUS_MAX_SIZE, currently set at 64KB.

A vulnerability has been identified in the Linux kernel that has been resolved. It concerns improper management of bio pointers in cloned requests, leading to issues with use-after-free.

A vulnerability related to locking usage for tcon fields in the Linux kernel has been resolved in the CIFS module. Previously, cifs_tcp_ses_lock was used to protect many objects, which has been improved by introducing dedicated locks for server, session, and tcon.

A vulnerability in the Linux kernel related to event handler initialization in IPMB has been resolved, which does not use I2C reads but requires a value to be set. Otherwise, an I2C read will return an uninitialized value from the bus driver.

A vulnerability related to URB leak in the pvr2_send_request_ex function has been fixed in the Linux kernel. The issue occurs when the function successfully submits a write URB but fails to submit the read URB, leading to an immediate return without waiting for the write URB to complete.

A vulnerability in the Linux kernel related to RDS connections lacking a proper shortcut in case of connection errors has been resolved.

A vulnerability has been identified in the Linux kernel that has been resolved in the TMU driver. The issue was that the TMU device could be used as both a clocksource and a clockevent provider, and the driver improperly managed the device's power.

A vulnerability in the Linux kernel related to improper management of the reconnect-pending bit in the net/rds module has been resolved. The issue occurs when canceling the reconnect worker if it has not been scheduled beforehand.