CVE Vulnerability Catalog

In the Linux kernel, the dw9714 camera driver (media i2c) did not disable the voltage regulator when probing failed, causing warnings and potential issues. The fix adds regulator disabling in error handling.

In the venus media driver in the Linux kernel, a NULL pointer dereference in hfi_core_deinit was fixed. When hfi_destroy sets core->ops to NULL, hfi_core_deinit could not call core_deinit, causing a bug. The fix skips the call when necessary.

In the Linux kernel, the ath11k driver has a vulnerability causing a crash when modules are removed (rmmod) with spectral scan enabled. The issue is due to not disabling spectral scan before cleaning the data buffer, leading to a NULL pointer dereference. The fix sends a WMI command to firmware before cleaning the buffer.

In the Linux kernel on ARM64, a vulnerability was found in the handling of unknown system calls in compat (32-bit) mode. When a compat process invokes an invalid syscall number, the kernel incorrectly interprets this number as an ESR_ELx value, leading to misleading error messages in dmesg that suggest pointer authentication issues. The fix sets ESR_ELx to 0 to avoid incorrect interpretation.

In the Linux kernel, the Intel ice network driver's ice_get_vf_vsi function can return NULL in some cases, and many places did not check the pointer validity, potentially leading to NULL dereference. The fix adds checks for the return value everywhere.

In the Linux kernel, the MediaTek VCODEC driver (mtk-vcodec-dec) has a vulnerability causing a kernel crash when removing the module. When the driver operates in subdev mode, the dev->pm.dev pointer is NULL, leading to a call to __pm_runtime_disable on an invalid address and a system panic.

In the ti_sci_pm_domains driver in the Linux kernel, a check for the return value of devm_kcalloc was added. If memory allocation fails, the function returns -ENOMEM to avoid a later NULL pointer dereference.

In the F2FS filesystem in the Linux kernel, a bug in dec_valid_node_count() that caused BUG_ON was fixed. When total_valid_block_count or total_valid_node_count were corrupted to zero, the function panicked. The fix prints a warning and sets SBI_NEED_FSCK instead of panicking.

In the F2FS filesystem in the Linux kernel, a problem with not clearing dirty inode in f2fs_evict_inode() was fixed. When inode node and dnode node share the same nid, dnode truncation invalidates its NAT entry, causing failure when truncating inode node and leaving it dirty. The fix clears dirty for inode and sets SBI_NEED_FSCK flag.

In the F2FS filesystem in the Linux kernel, additional sanity checks for inline data inodes were added. The issue occurred when an inode had both inline_data and encrypted flags, leading to inline data conversion and page cache pollution, then panic in clear_inode(). The fix adds sanity checks in sanity_check_inode().

In the Linux kernel, the f2fs filesystem had an inconsistency between the checkpoint's valid block count and the SIT table, which could trigger a kernel panic during garbage collection. The fix adds consistency validation.

In the Linux kernel, the f2fs filesystem functions f2fs_is_valid_blkaddr and __is_bitmap_valid triggered WARN_ON warnings that could be exploited with malicious data. The fix replaces WARN_ON with dump_stack to avoid unnecessary warnings.

In the Linux kernel, the f2fs filesystem has a vulnerability causing an infinite loop when flushing node pages. The issue occurs when I/O operations return EIO errors, leading to a system hang.

In the Linux kernel, a deadlock in rtw_surveydone_event_callback() in the staging rtl8723bs driver was fixed. The deadlock occurred due to holding a lock while calling del_timer_sync().

A vulnerability in the Linux kernel's Ceph filesystem can cause a deadlock when a client holds Fwb caps and waits for a getattr(Fsr) response while the MDS server tries to revoke caps. This blocks write operations.

In the Linux kernel, in the AMD Display driver, there is a vulnerability involving division by zero. If a read modulo value is 0, it can cause a kernel panic.

In the Linux kernel, an issue in tpm2_del_space() in the TPM module was fixed, where missing use of try_get_ops() could lead to a NULL pointer dereference in a tiny race window.

W jądrze systemu Linux zidentyfikowano podatność związaną z wyciekiem referencji podczas przełączania stref lub przestrzeni nazw sieciowych. Problem występuje, gdy nie wykonano czyszczenia ct pomiędzy tymi operacjami, co prowadzi do nieprawidłowego zarządzania wpisami ct.

In the Linux kernel, a vulnerability in the f2fs filesystem causes a hang during statistics read and unmount operations. The issue is due to using a mutex instead of a spin_lock, leading to thread deadlock.

W jądrze systemu Linux naprawiono podatność, która powodowała wyświetlanie komunikatu ostrzegawczego związane z błędnym dopasowaniem typów kodów błędów w funkcji qla2x00_async_adisc_sp_done. Wprowadzono dodatkowe tłumaczenie jednego typu kodu błędu na inny, aby rozwiązać ten problem.