CVE-2022-49875

In the Linux kernel, the following vulnerability has been resolved:

bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE

When using bpftool to pin {PROG, MAP, LINK} without FILE, segmentation fault will occur. The reson is that the lack of FILE will cause strlen to trigger NULL pointer dereference. The corresponding stacktrace is shown below:

do_pin do_pin_any do_pin_fd mount_bpffs_for_pin strlen(name) <- NULL pointer dereference

Fix it by adding validation to the common process.

In the Linux kernel, the following vulnerability has been resolved:

bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE

When using bpftool to pin {PROG, MAP, LINK} without FILE, segmentation fault will occur. The reson is that the lack of FILE will cause strlen to trigger NULL pointer dereference. The corresponding stacktrace is shown below:

do_pin do_pin_any do_pin_fd mount_bpffs_for_pin strlen(name) <- NULL pointer dereference

Fix it by adding validation to the common process.

In the Linux kernel, the following vulnerability has been resolved:

bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE

When using bpftool to pin {PROG, MAP, LINK} without FILE, segmentation fault will occur. The reson is that the lack of FILE will cause strlen to trigger NULL pointer dereference. The corresponding stacktrace is shown below:

do_pin do_pin_any do_pin_fd mount_bpffs_for_pin strlen(name) <- NULL pointer dereference

Fix it by adding validation to the common process.

In the Linux kernel, the following vulnerability has been resolved:

bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE

When using bpftool to pin {PROG, MAP, LINK} without FILE, segmentation fault will occur. The reson is that the lack of FILE will cause strlen to trigger NULL pointer dereference. The corresponding stacktrace is shown below:

do_pin do_pin_any do_pin_fd mount_bpffs_for_pin strlen(name) <- NULL pointer dereference

Fix it by adding validation to the common process.

In the Linux kernel, the following vulnerability has been resolved:

bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE

When using bpftool to pin {PROG, MAP, LINK} without FILE, segmentation fault will occur. The reson is that the lack of FILE will cause strlen to trigger NULL pointer dereference. The corresponding stacktrace is shown below:

do_pin do_pin_any do_pin_fd mount_bpffs_for_pin strlen(name) <- NULL pointer dereference

Fix it by adding validation to the common process.

In the Linux kernel, the following vulnerability has been resolved: bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE When using bpftool to pin {PROG, MAP, LINK} without FILE, segmentation fault will occur. The reson is that the lack of FILE will cause strlen to trigger NULL pointer dereference. The corresponding stacktrace is shown below: do_pin do_pin_any do_pin_fd mount_bpffs_for_pin strlen(name) <- NULL pointer dereference Fix it by adding validation to the common process.

In the Linux kernel, the following vulnerability has been resolved: bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE When using bpftool to pin {PROG, MAP, LINK} without FILE, segmentation fault will occur. The reson is that the lack of FILE will cause strlen to trigger NULL pointer dereference. The corresponding stacktrace is shown below: do_pin do_pin_any do_pin_fd mount_bpffs_for_pin strlen(name) <- NULL pointer dereference Fix it by adding validation to the common process.

• perf/x86/intel/uncore: Fix die ID init and look up bugs {CVE-2026-43344}
• x86/apic: Disable x2apic on resume if the kernel expects so {CVE-2026-43363}
• drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
• dm: remove fake timeout to avoid leak request {CVE-2026-43314}
• md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163}
• drm: Account property blob allocations to memcg {CVE-2026-43287}
• drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206}
• Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
• net/sched: Fix backlog accounting in qdisc_dequeue_internal {CVE-2025-39677}
• l2tp: avoid one data-race in l2tp_tunnel_del_work() {CVE-2026-23120}
• net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() {CVE-2025-39876}
• espintcp: fix skb leaks {CVE-2025-38057}
• cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() {CVE-2025-37829}
• tipc: fix NULL pointer dereference in tipc_mon_reinit_self() {CVE-2025-37824}
• KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses {CVE-2025-23141}
• virtiofs: add filesystem context source name check {CVE-2025-37773}
• netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets {CVE-2025-22063}
• ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
• wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
• wifi: ath11k: fix RCU stall while reaping monitor destination ring {CVE-2024-58097}
• net/sctp: Prevent autoclose integer overflow in sctp_association_init() {CVE-2024-57938}
• ubi: fastmap: Fix duplicate slab cache names while attaching {CVE-2024-53172}
• drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() {CVE-2024-56369}
• firmware: arm_scpi: Check the DVFS OPP count returned by the firmware {CVE-2024-53157}
• vsock: Fix sk_error_queue memory leak {CVE-2024-53118}
• mm: fix NULL pointer dereference in alloc_pages_bulk_noprof {CVE-2024-53113}
• exec: don't WARN for racy path_noexec check {CVE-2024-50010}
• drm/amd/display: Initialize get_bytes_per_element's default to 1 {CVE-2024-49892}
• ppp: do not assume bh is held in ppp_channel_bridge_input() {CVE-2024-49946}
• drm/amd/display: Skip Recompute DSC Params if no Stream on Link {CVE-2024-47683}
• x86/sgx: Fix deadlock in SGX NUMA node search {CVE-2024-49856}
• pktgen: use cpus_read_lock() in pg_net_init() {CVE-2024-46681}
• nfsd: call cache_put if xdr_reserve_space returns NULL {CVE-2024-47737}
• uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind {CVE-2024-46739}
• drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
• net/mlx5: Fix bridge mode operations when there are no VFs {CVE-2024-46857}
• Input: MT - limit max slots {CVE-2024-45008}
• net/mlx5e: SHAMPO, Fix incorrect page release {CVE-2024-46717}
• netfilter: ctnetlink: use helper function to calculate expect ID {CVE-2024-44944}
• lib: objagg: Fix general protection fault {CVE-2024-43846}
• drm/qxl: Add check for drm_cvt_mode {CVE-2024-43829}
• mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems {CVE-2024-42073}
• drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes {CVE-2024-42101}
• RDMA/mlx5: Add check for srq max_sge attribute {CVE-2024-40990}
• tracing: Build event generation tests only as modules {CVE-2024-41004}
• KEYS: trusted: Fix memory leak in tpm2_key_encode() {CVE-2024-36967}
• epoll: be better about file lifetimes {CVE-2024-38580}
• drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988}
• RDMA/srpt: Add a check for valid 'mad_agent' pointer {CVE-2023-54274}
• x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction {CVE-2023-54172}
• ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772}
• iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected {CVE-2024-26891}
• dm: don't attempt to queue IO under RCU…