CVE Vulnerability Catalog

A vulnerability has been identified in the Linux kernel that may lead to system crashes when attempting to unload a driver while jack detection is pending. This issue affects the nau8821 component and is related to improper handling of delayed work.

A vulnerability has been identified in the Linux kernel affecting the ublk_ctrl_cmd_dump() function. The issue arises from the lack of validation of the SQE128 flag before accessing memory, which could lead to unauthorized out-of-bounds memory access.

In the Linux kernel, two memory leak issues in the gfs2_fill_super function have been resolved. These issues occur during error handling when transitioning a filesystem to read-write mode fails.

A vulnerability has been identified in the Linux kernel in the hfs_bnode_create function, which returns an existing node without incrementing its reference count. This can lead to reference count inconsistency and kernel panic when the node is later freed.

A vulnerability has been identified in the Linux kernel within the au1200fb_drv_probe() function, leading to a memory leak if the platform_get_irq function fails. The issue has been resolved by introducing a goto label to ensure proper resource cleanup.

A vulnerability has been identified in the Linux kernel within the md/raid5 module that leads to I/O hang in degraded arrays with llbitmap. The issue arises from a missing check on the state of bits, resulting in a deadloop during stripe handling.

A vulnerability related to MTU change validation in the fbnic driver has been resolved in the Linux kernel. Increasing the MTU beyond the HDS threshold causes packet fragmentation, which may lead to issues with TCP data transmission.

A vulnerability related to a memory leak in the starfive_aes_aead_do_one_req() function has been identified in the Linux kernel. This function allocates memory but fails to free it in case of errors, leading to memory leaks.

A vulnerability has been identified in the Linux kernel related to a race condition in the hwrng module. The issue arises from the hwrng_fillfn() thread not being properly stopped, leading to use-after-free situations and thread management errors.

A vulnerability has been identified in the Linux kernel within the ext4_ext_shift_extents() function, leading to a memory leak. The issue occurs when the extent pointer is NULL, preventing resource release.

A vulnerability has been identified in the Linux kernel related to a memory leak in the amdgpu_acpi_enumerate_xcc() function. If amdgpu_acpi_dev_init() returns -ENOMEM, the function does not free the allocated xcc_info memory, leading to a memory leak.

A vulnerability has been identified in the Linux kernel related to the get_burstcount() function, which can return -EBUSY on timeout. In this case, the function does not release the locality, potentially leading to locality leaks.

A vulnerability has been identified and resolved in the Linux kernel. The issue affects GMAC4, where in rare cases, with split header enabled, the hardware does not fill buf2 of the first descriptor with payload, leading to incorrect length calculations for buf2 of the second descriptor.

A vulnerability has been identified in the Linux kernel related to a memory leak in the ni_usb_init() function. If ni_usb_setup_init() fails, the function returns -EFAULT without freeing the allocated buffer, leading to a memory leak.

A vulnerability has been identified in the Linux kernel that has been resolved. The issue involved multiple unregistrations of the same hash algorithm during driver detach due to a wrong iterator.

A vulnerability has been identified in the Linux kernel within the Btrfs filesystem that leads to system aborts during chunk allocation due to non-consecutive gaps. This issue can occur with DUP chunk allocations, resulting in an EEXIST error.

A vulnerability has been identified in the Linux kernel regarding improper initialization of data in nlmsg responses. The issue occurs with the RTM_GETNEIGH message, which may return uninitialized data in the pad bytes.

A vulnerability has been identified in the Linux kernel that leads to a memory leak on codec_info allocation failure. The functions wave5_vpu_open_enc() and wave5_vpu_open_dec() do not free the previously allocated instance, resulting in a memory leak.

A vulnerability has been identified in the Linux kernel's BPF mechanism, allowing the hash of a map to be calculated and cached regardless of its frozen state. This can lead to a TOCTOU bug where a user can modify the map's contents before freezing it.

A vulnerability in the Linux kernel related to a potential memory leak during PWM chip initialization has been resolved. If __pinned_init() fails, the allocated pwm_chip would leak due to not calling pwmchip_put() on the error path.