CLSA-2026-1777616064

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1777616064.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1777616064
Upstream
  • CVE-2026-31431
Published
2026-05-01T09:15:50Z
Modified
2026-05-29T01:37:53.551671955Z
Summary
kernel: Fix of 260 CVEs
Details
  • crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
  • crypto: afalg - Fix page reassignment overflow in afalgpulltsgl {CVE-2026-31431}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
  • crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
  • crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
  • crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
  • crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
  • crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
  • crypto: algifaead - use memcpysglist() instead of null skcipher {CVE-2026-31431}
  • crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
  • wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwalloc_request() {CVE-2022-50551}
  • bonding: limit BONDMODE8023AD to Ethernet devices {CVE-2026-23099}
  • libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892}
  • intel_th: msu: Fix vmalloced buffers {CVE-2022-50142}
  • vt: Clear selection before changing the font {CVE-2022-49948}
  • ACPICA: Fix error code path in acpidscallcontrolmethod() {CVE-2022-50411}
  • usbnet: Run unregisternetdev() before unbindall() {CVE-2022-50220}
  • ipvs: fix WARNING in ipvsappnetcleanup() {CVE-2022-49917}
  • bpf: Propagate error from htablockbucket() to userspace {CVE-2022-50490}
  • binfmtmisc: fix shift-out-of-bounds in checkspecial_flags {CVE-2022-50497}
  • module: fix [eshstrndx].shsize=0 OOB access {CVE-2022-49444}
  • ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
  • tracing: Fix potential double free in createvarref() {CVE-2022-49410}
  • powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366}
  • Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times {CVE-2022-50419}
  • xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426}
  • svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
  • net: hns3: add VLAN id validation before using {CVE-2025-71112}
  • net: mdio: fix undefined behavior in bit shift for _mdiobusregister {CVE-2022-49907}
  • capabilities: fix undefined behavior in bit shift for CAPTOMASK {CVE-2022-49870}
  • ata: ahci: Match EMMAXSLOTS with SATAPMPMAX_PORTS {CVE-2022-50315}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • team: fix check for port enabled in teamqueueoverrideportprio_changed() {CVE-2025-71091}
  • staging: vmeuser: Fix possible UAF in tsi148dmalistadd {CVE-2022-50384}
  • ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076}
  • ftrace: Add condresched() to ftracegraphsethash() {CVE-2025-37940}
  • net: stmmac: Fix accessing freed irq affinity_hint {CVE-2025-23155}
  • ext4: set goal start correctly in ext4mbnormalize_request {CVE-2023-54021}
  • netfilter: ipset: fix region locking in hash types {CVE-2025-37997}
  • openvswitch: Fix unsafe attribute parsing in output_userspace() {CVE-2025-37998}
  • wifi: brcm80211: fmac: Add error handling for brcmfusbdl_writeimage() {CVE-2025-37990}
  • nfs: handle failure of nfsgetlock_context in unlock path {CVE-2025-38023}
  • drm/amd/pm: Prevent division by zero {CVE-2025-37767}
  • netfilter: ctnetlink: remove refcounting in expectation dumpers {CVE-2025-39764}
  • tracing: Fix null pointer dereference in tracingerrlog_open() {CVE-2023-53167}
  • ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
  • scsi: qla2xxx: Pointer may be dereferenced {CVE-2023-53150}
  • net: pktgen: fix access outside of user given buffer in pktgenthreadwrite() {CVE-2025-38061}
  • dm cache: prevent BUG_ON by blocking retries on failed device resumes {CVE-2025-38066}
  • libnvdimm/labels: Fix divide error in ndlabeldata_init() {CVE-2025-38072}
  • wifi: iwlwifi: pcie: fix NULL pointer dereference in iwlpcieirqrxmsix_handler() {CVE-2023-53251}
  • tracing: Free error logs of tracing instances {CVE-2023-53375}
  • perf: Revert to requiring CAPSYSADMIN for uprobes {CVE-2025-38466}
  • gve: add missing NULL check for gveallocpending_packet() in TX DQO {CVE-2025-38122}
  • dma-buf: insert memory barrier before updating num_fences {CVE-2025-38095}
  • x86/sgx: Prevent attempts to reclaim poisoned pages {CVE-2025-38334}
  • ext4: inline: fix len overflow in ext4prepareinline_data {CVE-2025-38222}
  • fbdev: Fix fbsetvar to prevent null-ptr-deref in fbvideomodeto_var {CVE-2025-38214}
  • sctp: initialize more fields in sctpv6from_sk() {CVE-2025-39812}
  • atm: Revert atmaccounttx() if copyfromiter_full() fails. {CVE-2025-38190}
  • usb: net: sierra: check for no status endpoint {CVE-2025-38474}
  • vxlan: Annotate FDB data races {CVE-2025-38037}
  • tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
  • calipso: Fix null-ptr-deref in calipsoreq{set,del}attr(). {CVE-2025-38181}
  • netsched: schsfq: fix a potential crash on gso_skb handling {CVE-2025-38115}
  • RDMA/mlx5: Initialize objevent->objsublist before xainsert {CVE-2025-38387}
  • jbd2: fix data-race and null-ptr-deref in jbd2journaldirty_metadata() {CVE-2025-38337}
  • mpls: Use rcudereferencertnl() in mplsrouteinput_rcu(). {CVE-2025-38324}
  • fbdev: core: fbcvt: avoid division by 0 in fbcvthperiod() {CVE-2025-38312}
  • usb: typec: altmodes/displayport: do not index invalid pin_assignments {CVE-2025-38391}
  • nfsd: nfsd4spomust_allow() must check this is a v4 compound request {CVE-2025-38430}
  • wifi: ath9k: hifusb: Fix use-after-free in ath9khifusbregincb() {CVE-2022-50829}
  • wifi: mt76: disable napi on driver removal {CVE-2025-38009}
  • ftrace: Fix potential warning in traceprintkseq during ftrace_dump {CVE-2025-39813}
  • net/sched: Abort __tcmodifyqdisc if parent class does not exist {CVE-2025-38457}
  • scsi: target: iscsi: Fix use-after-free in iscsitdecconnusagecount() {CVE-2026-23216}
  • Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082}
  • e1000: fix OOB in e1000tbishould_accept() {CVE-2025-71093}
  • RDMA/irdma: avoid invalid read in irdmanetevent {CVE-2025-71133}
  • scsi: qla4xxx: Prevent a potential error pointer dereference {CVE-2025-39676}
  • ppp: fix race conditions in pppfillforward_path {CVE-2025-39673}
  • libceph: replace overzealous BUGON in osdmapapply_incremental() {CVE-2026-22990}
  • thunderbolt: Do not double dequeue a configuration request {CVE-2025-38174}
  • bnxten: Set DMA unmap len correctly for XDPREDIRECT {CVE-2025-38439}
  • ACPICA: fix acpi operand cache leak in dswstate.c {CVE-2025-38345}
  • atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460}
  • dm: fix unconditional IO throttle caused by REQ_PREFLUSH {CVE-2025-38063}
  • shmem: use ramfskillsb() for kill_sb method of ramfs-based tmpfs {CVE-2023-53391}
  • nfsd: Initialize ssc before laundromat_work to prevent NULL dereference {CVE-2025-38231}
  • udf: Do not update file length for failed writes to inline files {CVE-2023-53295}
  • bpf: Fix WARN() in getbpfrawtpregs {CVE-2025-38285}
  • net/sched: Return NULL when htblookupleaf encounters an empty rbtree {CVE-2025-38468}
  • nvmet-tcp: don't restore null skstatechange {CVE-2025-38035}
  • wifi: iwlwifi: mvm: fix double free on tx path. {CVE-2022-50248}
  • ACPICA: fix acpi parse and parseext cache leaks {CVE-2025-38344}
  • bonding: fix use-after-free due to enslave fail after slave array update {CVE-2026-23171}
  • macvlan: fix error recovery in macvlancommonnewlink() {CVE-2026-23209}
  • cxl/acpi: Fix a use-after-free in cxlparsecfmws() {CVE-2023-53479}
  • fbcon: Fix OOB access in font allocation
  • fbcon: fix integer overflow in fbcondoset_font {CVE-2025-39967}
  • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • rename(): fix the locking of subdirectories
  • scsi: qedi: Fix use after free bug in qedi_remove() {CVE-2023-54100}
  • ixgbe: Fix panic during XDP_TX with > 64 CPUs {CVE-2023-54090}
  • bpf: Do not let BPF test infra emit invalid GSO types to stack {CVE-2025-68725}
  • net: usb: rtl8150: fix memory leak on usbsubmiturb() failure {CVE-2025-71154}
  • scsi: qla2xxx: Check valid rport returned by fcbsgto_rport() {CVE-2023-54014}
  • selinux: enable use of both GFPKERNEL and GFPATOMIC in convert_context() {CVE-2022-50699}
  • HID: hid-ntrig: fix unable to handle page fault in ntrigreportversion() {CVE-2025-39808}
  • PCI: Fix dropping valid root bus resources with .end = zero {CVE-2023-53814}
  • KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state {CVE-2023-53208}
  • drm/amdgpu: fix amdgpuirqput call trace in gmcv100hwfini {CVE-2023-53193}
  • block: avoid possible overflow for chunksectors check in blkstack_limits() {CVE-2025-39795}
  • libceph: return the handler error from monhandleauth_done() {CVE-2026-22992}
  • Bluetooth: Fix hcisuspendsync crash {CVE-2023-53520}
  • jbd2: prevent softlockup in jbd2logdo_checkpoint() {CVE-2025-39782}
  • net: sock: fix hardened usercopy panic in sockrecverrqueue {CVE-2026-22977}
  • wifi: ath11k: clear initialized flag for deinit-ed srng lists {CVE-2025-38601}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • libceph: make freechoosearg_map() resilient to partial allocation {CVE-2026-22991}
  • soundwire: fix enumeration completion {CVE-2023-54096}
  • ext4: fix inode leak in ext4xattrinode_create() on an error path {CVE-2022-50845}
  • ring-buffer: Handle race between rbmovetail and rbcheckpages {CVE-2023-53709}
  • netlink: fix potential deadlock in netlinkseterr() {CVE-2023-53731}
  • xhci: dbc: Fix memory leak in xhciallocdbc() {CVE-2022-50809}
  • ext4: fix delayed allocation bug in ext4clumapped for bigalloc + inline {CVE-2022-50286}
  • ubi: ubiwlput_peb: Fix infinite loop when wear-leveling work failed {CVE-2023-53481}
  • driver core: location: Free struct acpipldinfo *pld before return false {CVE-2023-53211}
  • x86/mm/64: define ARCHPAGETABLESYNCMASK and archsynckernel_mappings() {CVE-2025-39845}
  • dma-buf/dma-resv: Stop leaking on krealloc() failure {CVE-2023-53181}
  • rxrpc: Fix oops due to non-existence of prealloc backlog struct {CVE-2025-38514}
  • xfrm: Zero padding when dumping algos and encap {CVE-2023-53684}
  • ALSA: ac97: Fix possible NULL dereference in sndac97mixer {CVE-2023-53648}
  • vcscreen: reload load of struct vcdata pointer in vcs_write() to avoid UAF {CVE-2023-53747}
  • ice: fix wrong fallback logic for FDIR {CVE-2023-54040}
  • cifs: Fix xid leak in cifs_create() {CVE-2022-50351}
  • drm/amd/display: populate subvp cmd info only for the top pipe {CVE-2023-53806}
  • netfilter: ctnetlink: fix refcount leak on table dump {CVE-2025-38721}
  • sfc: fix crash when reading stats while NIC is resetting {CVE-2023-54156}
  • Bluetooth: Fix race condition in hidpsessionthread {CVE-2023-54120}
  • bpf: Reject %p% format string in bprintf-like helpers {CVE-2025-38528}
  • RDMA/bnxt_re: Prevent handling any completions after qp destroy {CVE-2023-54048}
  • RDMA/siw: Fix immediate work request flush to completion queue {CVE-2022-50736}
  • net/packet: fix a race in packetsetring() and packet_notifier() {CVE-2025-38617}
  • ext4: do not BUG when INLINEDATAFL lacks system.data xattr {CVE-2025-38701}
  • IB/hfi1: Fix possible panic during hotplug remove {CVE-2023-53488}
  • cgroup: split cgroupdestroywq into 3 workqueues {CVE-2025-39953}
  • NFS: Fix the setting of capabilities when automounting a new filesystem {CVE-2025-39798}
  • fs: Prevent file descriptor table allocations exceeding INT_MAX {CVE-2025-39756}
  • ext4: remove a BUGON in ext4mbreleasegroup_pa() {CVE-2023-53450}
  • media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() {CVE-2025-39713}
  • ALSA: usb-audio: Fix use-after-free in sndusbmixer_free() {CVE-2026-23089}
  • wifi: mac80211: reject TDLS operations when station is not associated {CVE-2025-38644}
  • ubi: Fix unreferenced object reported by kmemleak in ubiresizevolume() {CVE-2023-53271}
  • RDMA/bnxt_re: wraparound mbox producer index {CVE-2023-53201}
  • x86/iopl: Cure TIFIOBITMAP inconsistencies {CVE-2025-38100}
  • ASoC: core: Check for rtd == NULL in sndsocremovepcmruntime() {CVE-2025-38706}
  • scsi: libiscsi: Initialize iscsiconn->dddata only if memory is allocated {CVE-2025-38700}
  • ALSA: hda: Fix Oops by 9.1 surround channel names {CVE-2023-53400}
  • mm: move page table sync declarations to linux/pgtable.h {CVE-2025-39844}
  • rcu: Protect rcuprinttaskexpstall() ->exp_tasks access {CVE-2023-53419}
  • wifi: ath9k: hifusb: clean up skbs if ath9khifusbrx_stream() fails {CVE-2023-53199}
  • HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras {CVE-2025-38540}
  • scsi: ses: Don't attach if enclosure has no components {CVE-2023-53431}
  • ipv6/addrconf: fix a potential refcount underflow for idev {CVE-2023-53189}
  • wifi: ath11k: Fix SKB corruption in REO destination ring {CVE-2023-53315}
  • bpf: fix ktls panic with sockmap {CVE-2025-38166}
  • net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime {CVE-2025-38470}
  • net: openvswitch: fix race on port output {CVE-2023-53188}
  • netsched: Flush gsoskb list too during ->change() {CVE-2025-37992}
  • netfilter: x_tables: fix percpu counter block leak on error path when creating new netns {CVE-2023-53200}
  • RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161}
  • afunix: Fix data-race around unixtot_inflight. {CVE-2023-54006}
  • watchdog: Fix kmemleak in watchdogcdevregister {CVE-2023-53234}
  • usb: idmouse: fix an uninit-value in idmouse_open {CVE-2022-50733}
  • net: dcb: choose correct policy to parse DCBATTRBCN {CVE-2023-53369}
  • mmc: rtsxusbsdmmc: fix return value check of mmcaddhost() {CVE-2022-50347}
  • Bluetooth: l2cap: Check encryption key size on incoming connection {CVE-2025-39889}
  • x86/apic: Don't disable x2APIC if locked {CVE-2022-50720}
  • serial: 8250: Reinit port->pm on port specific driver unbind {CVE-2023-53176}
  • devlink: hold region lock when flushing snapshots {CVE-2022-50712}
  • net: qrtr: Fix a refcount bug in qrtr_recvmsg() {CVE-2023-53445}
  • be2net: Fix NULL pointer dereference in becmdgetmacfrom_list {CVE-2026-23084}
  • PM: EM: fix memory leak with using debugfs_lookup() {CVE-2023-53411}
  • vdpa: Add queue index attr to vdpanlpolicy for nlattr length check {CVE-2023-54031}
  • atm: clip: prevent NULL deref in clip_push() {CVE-2025-38251}
  • ceph: fix potential use-after-free bug when trimming caps {CVE-2023-53867}
  • ACPI: video: check for error while searching for backlight device parent {CVE-2023-52693}
  • cifs: fix DFS traversal oops without CONFIGCIFSDFS_UPCALL {CVE-2023-53246}
  • x86/xen: Fix memory leak in xeninitlock_cpu() {CVE-2022-50761}
  • net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping {CVE-2025-38126}
  • platform/x86: dell_rbu: Fix list usage {CVE-2025-38197}
  • x86/kexec: Fix double-free of elf header buffer {CVE-2023-54146}
  • ptp: remove ptp->nvclocks check logic in ptpvclockinuse() {CVE-2025-38305}
  • KVM: Destroy target device if coalesced MMIO unregistration fails {CVE-2023-54024}
  • drm/amd/pp: Fix potential NULL pointer dereference in atomctrlinitializemcregtable {CVE-2025-38319}
  • rcu: Fix _thiscpuread() lockdep warning in rcuforcequiescentstate() {CVE-2022-50771}
  • drm/radeon: Fix integer overflow in radeoncsparser_init {CVE-2023-53309}
  • net: atlantic: fix fragment overflow handling in RX path {CVE-2025-68301}
  • bpf: Fix oob access in cgroup local storage {CVE-2025-38502}
  • bpf: Add cookie object to bpf maps {CVE-2025-38502}
  • misc: vmwballoon: fix memory leak with using debugfslookup() {CVE-2023-53279}
  • platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks {CVE-2025-38412}
  • virtioring: Fix data race by tagging eventtriggered as racy for KCSAN {CVE-2025-38048}
  • tracing: Fix race issue between cpu buffer write and swap {CVE-2023-53368}
  • USB: wdm: close race between wdmopen and wdmwwanportstop {CVE-2025-37985}
  • can: bcm: bcmtxsetup(): fix KMSAN uninit-value in vfs_write {CVE-2023-53344}
  • wifi: ath11k: fix node corruption in ar->arvifs list {CVE-2025-38293}
  • x86/mm: Check return value from memblockphysalloc_range() {CVE-2025-38071}
  • net: Fix TOCTOU issue in skisreadable() {CVE-2025-38112}
  • scsi: mpi3mr: Fix an issue found by KASAN {CVE-2023-54011}
  • net/sched: clsu32: use skbheaderpointercareful() {CVE-2026-23204}
  • net: add skbheaderpointer_careful() helper
  • scsi: qla2xxx: Array index may go out of bound {CVE-2023-54179}
  • net/mlx5e: fix memory leak in mlx5eptpopen {CVE-2023-54169}
  • igc: Fix Kernel Panic during ndotxtimeout callback {CVE-2023-54166}
  • Bluetooth: L2CAP: Fix potential user-after-free {CVE-2023-54214}
  • RDMA/restrack: Release MR restrack when delete {CVE-2022-50822}
  • RDMA/irdma: Fix memory leak of PBLE objects {CVE-2023-54055}
  • wifi: ath11k: Fix memory leak in ath11kpeerrxfragsetup {CVE-2023-54275}
  • mptcp: stricter state check in mptcp_worker {CVE-2023-54176}
  • nfsd: provide locking for v4endgrace {CVE-2026-22980}
  • iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089}
  • net: atlantic: add check for MAXSKBFRAGS {CVE-2025-68301}
  • net: atlantic: reduce scope of isrsccomplete
  • atlantic: Fix buffring OOB in aqringrxclean
  • drm/sched: Fix potential double free in drmschedjobaddresv_dependencies {CVE-2025-40096}
  • net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe {CVE-2022-50777}
  • wifi: rt2x00: Fix memory leak when handling surveys {CVE-2023-54131}
  • wifi: ath9k: hifusb: fix memory leak of urbs in ath9khifusbdealloctxurbs() {CVE-2022-50740}
  • scsi: target: iscsi: Fix use-after-free in iscsitdecsessionusagecount() {CVE-2026-23193}
  • mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure {CVE-2026-23144}
  • ACPICA: Fix use-after-free in acpiutcopyipackageto_ipackage() {CVE-2022-50423}
  • wifi: ath10k: fix dmafreecoherent() pointer {CVE-2026-23133}
  • bpf: Move bpf map owner out of common struct {CVE-2025-38502}
  • fs: Lock moved directories
  • fs: Establish locking order for unrelated directories
  • mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800}
  • macvlan: fix possible UAF in macvlanforwardsource() {CVE-2026-23001}
  • HID: uclogic: Correct devm device reference for hidinput input_dev name {CVE-2023-54207}
  • libceph: prevent potential out-of-bounds reads in handleauthdone() {CVE-2026-22984}
  • ppp: fix memory leak in padcompressskb {CVE-2025-39847}
  • migrate: correct lock ordering for hugetlb file folios {CVE-2026-23097}
  • keys: Fix linking a duplicate key to a keyring's assoc_array {CVE-2023-54170}
  • scsi: qla4xxx: Add length check when parsing nlattrs {CVE-2023-53456}
  • scsi: mpi3mr: Fix issues in mpi3mrgetalltgtinfo() {CVE-2023-53320}
  • wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range {CVE-2023-54229}
  • wifi: iwlwifi: pcie: fix possible NULL pointer dereference {CVE-2023-54053}
  • dm flakey: don't corrupt the zero page {CVE-2023-54317}
  • md/raid10: fix memleak for 'conf->bio_split' {CVE-2023-54123}
  • crypto: qat - fix out-of-bounds read {CVE-2023-54325}
  • drm/nouveau/kms/nv50-: init hpdirqlock for PIOR DP {CVE-2023-54263}
  • ipmi:ssif: Fix a memory leak when scanning for an adapter {CVE-2023-54064}
  • Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" {CVE-2023-54197}
  • netfilter: nf_tables: always release netdev hooks from notifier {CVE-2023-54200}
  • wifi: iwlwifi: fix iwlmvmmaxamsdusize() for MLO {CVE-2023-54029}
  • serial: arcuart: fix ofiomap leak in arc_serial_probe {CVE-2023-53719}
  • soundwire: bus: Fix unbalanced pmruntimeput() causing usage count underflow {CVE-2023-54259}
  • vfio/type1: fix cap_migration information leak {CVE-2023-54137}
  • drm/client: Fix memory leak in drmclienttarget_cloned {CVE-2023-54091}
  • RDMA: hfi1: fix possible divide-by-zero in findhwthread_mask() {CVE-2025-39742}
  • crypto: ccp - Fix crash when rebind ccp device for ccp.ko {CVE-2025-38581}
  • iwlwifi: Add missing check for allocorderedworkqueue {CVE-2025-38602}
  • net: bridge: fix soft lockup in brmulticastquery_expired() {CVE-2025-39773}
  • net: drop UFO packets in udprcvsegment() {CVE-2025-38622}
  • iommu: Fix error unwind in iommugroupalloc() {CVE-2023-53482}
  • qed: allow sleep in qedmcptrace_dump() {CVE-2023-53509}
  • cifs: Fix xid leak in cifs_flock() {CVE-2022-50460}
  • platform/x86: dell-sysman: Fix reference leak {CVE-2023-53631}
  • scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure {CVE-2025-38695}
  • bpf, ktls: Fix data corruption when using bpfmsgpop_data() in ktls {CVE-2025-38608}
  • bpf: prevent decltag from being referenced in funcproto {CVE-2022-50862}
  • mm/kmemleak: avoid deadlock by moving prwarn() outside kmemleaklock {CVE-2025-39736}
  • mm/kmemleak: avoid soft lockup in __kmemleakdocleanup() {CVE-2025-39737}
  • drm/amd/display: Fix potential null dereference {CVE-2023-53498}
  • x86/MCE/AMD: Use an u64 for bank_map {CVE-2023-53474}
  • kobject: Add sanity check for kset->kobj.ktype in kset_register() {CVE-2023-53480}
References

Affected packages