1565 matches found
EUVD-2025-28933
Malicious code in bioql PyPI...
CVE-2022-50465
The CVE-2022-50465 issue is a Linux kernel ext4 fast-commit journal memory-leak: when the end of fast-commit journal blocks is unfinished, the unused tail space could leak uninitialized memory to disk. The published description states the fix is to zero out that unused space to prevent leakage. T...
CVE-2022-50428
CVE-2022-50428 affects the Linux kernel ext4 fast-commit journaling, caused by multiple off-by-one errors in filling tlv blocks. The issues constrain where tlvs start and end within a block, risking replay problems and memory leakage in last-byte handling. The fixed patch corrects block-filling o...
PT-2025-40150
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ext4 filesystem related to the fast-commit journal. Specifically, uninitialized memory could be leaked to disk when space at the end of fast-commit...
UBUNTU-CVE-2025-39890
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12kservicereadyextevent Currently, in ath12kservicereadyextevent, svcrdyext.macphycaps is not freed in the failure case, causing a memory leak. The following trace is observed in kmemleak:...
SUSE CVE-2025-39890
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12kservicereadyextevent Currently, in ath12kservicereadyextevent, svcrdyext.macphycaps is not freed in the failure case, causing a memory leak. The following trace is observed in kmemleak:...
CVE-2025-39890 wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12kservicereadyextevent Currently, in ath12kservicereadyextevent, svcrdyext.macphycaps is not freed in the failure case, causing a memory leak. The following trace is observed in kmemleak:...
CVE-2025-39890 wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12kservicereadyextevent Currently, in ath12kservicereadyextevent, svcrdyext.macphycaps is not freed in the failure case, causing a memory leak. The following trace is observed in kmemleak:...
CVE-2023-53343
CVE-2023-53343: Linux kernel vulnerability where icmp6_dev() dereferences ip6_null_entry->rt6i_idev, potentially enabling NULL pointer dereference when processing IPv6 Extension Headers (RPL/SRv6). Impact is local (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with available mitigation by upgrading to ...
CVE-2023-53343: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: icmp6: Fix null-ptr-deref of ip6nullentry-rt6iidev in icmp6dev. With some IPv6 Ext Hdr RPL, SRv6, etc., we can send a packet that has the link-local address as src and dst IP and will be forwarded to an external IP in the IPv6 Ex...
CVE-2023-53323 ext2/dax: Fix ext2_setsize when len is page aligned
In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fix ext2setsize when len is page aligned PAGEALIGNx macro gives the next highest value which is multiple of pagesize. But if x is already page aligned then it simply returns x. So, if x passed is 0 in daxzerorange...
SUSE CVE-2025-39780
In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on class switch When enabling a schedext scheduler, we may trigger invalid task state transitions, resulting in warnings like the following which can be easily reproduced by running t...
CLSA-2025-1757698145 kernel: Fix of 42 CVEs
x86/kvm: Disable kvmclock on all CPUs on shutdown CVE-2021-47110 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - cifs: fix double free race when mount fails in cifsgetroot CVE-2022-48919 - aio: mark AIO pseudo-fs noexec CVE-2016-10044 - cifs:...
DEBIAN-CVE-2025-39780
In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on class switch When enabling a schedext scheduler, we may trigger invalid task state transitions, resulting in warnings like the following which can be easily reproduced by running t...
CVE-2025-39780
In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on class switch When enabling a schedext scheduler, we may trigger invalid task state transitions, resulting in warnings like the following which can be easily reproduced by running t...
CVE-2025-39780 sched/ext: Fix invalid task state transitions on class switch
In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on class switch When enabling a schedext scheduler, we may trigger invalid task state transitions, resulting in warnings like the following which can be easily reproduced by running t...
CVE-2025-39780 sched/ext: Fix invalid task state transitions on class switch
In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on class switch When enabling a schedext scheduler, we may trigger invalid task state transitions, resulting in warnings like the following which can be easily reproduced by running t...
kernel: ext4: use-after-free in ext4_xattr_set_entry()
A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw allows a privileged local user to cause a system crash or other undefined behaviors...
CVE-2025-39780: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on class switch When enabling a schedext scheduler, we may trigger invalid task state transitions, resulting in warnings like the following which can be easily reproduced by running t...
