Alexander

The Linux kernel contains a flaw in the drm/xe/nvm subsystem that can lead to a double-free condition during auxiliary device initialization failure. Specifically, a memory region is freed twice – once during successful initialization and again during uninitialization when auxiliary device addition fails. This can result in system instability and potentially lead to a kernel panic, as demonstrated by a KASAN report. The issue is triggered when `auxiliary device init()` succeeds, but `auxiliary device add()` fails. The fix involves moving the `kfree(nvm)` call into the failure path of `auxiliary device init()` to prevent the double-free.

A flaw in the grub2-set-bootflag utility of grub2 can lead to a denial of service. The issue arises when the program creates a temporary file with new grubenv content and is killed before renaming it to the original grubenv file, resulting in the temporary file not being removed. This can cause the filesystem to fill up with temporary files when the utility is invoked multiple times, leading to a filesystem out of free inodes or blocks. The vulnerability is related to incomplete cleanup of temporary or auxiliary resources.

The issue is caused by a lack of input validation, leading to an information leak. An attacker can trick a user with root privilege into installing an application that can read process information, potentially causing a sensitive information leak.