PT-2025-8569 · Linux +5 · Linux Kernel +5

🗓️ 09 May 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 17 Views

Memory leak in Linux kernel's vlan newlink() function due to allocation failure without proper free.

Reporter	Title	Published	Views	Family All 19206
BDU FSTEC	The vulnerability of the fc_exch_abts_resp() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	9 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the nfsd_splice_actor() function in the fs/nfsd/vfs.c module, which is part of the Linux kernel’s Network File System support, allows a hacker to cause a service failure.	10 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the hugetlb_mcopy_atomic_pte() function in the mm/hugetlb.c module of the Linux kernel’s memory-management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	20 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `firmwareUploadUnregister()` function in the `drivers/base/firmwareLoader/sysfsUpload.c` file of the Linux kernel’s device drivers module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	20 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the check_func_arg() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	20 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the tgl_get_bw_info() function in the drivers/gpu/drm/i915/display/intel_bw.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a malicious actor to cause a service failure.	20 Feb 202600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the arm_smmu_device_probe() function in the drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c file – This driver provides support for Linux kernel’s IOMMU, allowing an attacker to cause a service failure.	25 Feb 202600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the nvme_alloc_admintags() function in the drivers/nvme/host/pci.c module – The NVME kernel support driver in the Linux operating system allows a hacker to trigger a service failure.	25 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ext4_resize_fs() function in the fs/ext4/resize.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.	27 Feb 202600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the arm_smmu_device_probe() function in the drivers/iommu/arm/arm-smmu/arm-smmu.c file – This is a Linux kernel IOMMU driver that allows a hacker to cause a service failure.	6 Mar 202600:00	–	bdu_fstec

Source	Link
web	www.web.archive.org/web/20250000000000*/https:/github.com/V4bel/CVE-2022-41218
bdu	www.bdu.fstec.ru/vul/2023-00454
ubuntu	www.ubuntu.com/security/CVE-2025-21711
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/CVE-2025-39735
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-49636
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

04 Jul 2025 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.5 - 8.8

CVSS 27.2

CVSS 38.8

EPSS0.36848

SSVC