PT-2025-20091 · Dgamoni · Locateandfilter

Name of the Vulnerable Software and Affected Versions: dgamoni LocateAndFilter versions 1.6.16 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 1.6.16 and...

PT-2025-20247 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software running on Cisco Catalyst 1000 Switches and Cisco Catalyst 2960L Switches affected versions not specified Description: A vulnerability in the access control list ACL programming could allow an unauthenticated, remote attack...

SUSE CVE-2023-53061

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2open Reference count of acls will leak when memory allocation fails. Fix this by adding the missing posixaclrelease...

CVE-2023-53061

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2open Reference count of acls will leak when memory allocation fails. Fix this by adding the missing posixaclrelease...

DEBIAN-CVE-2023-53061

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2open Reference count of acls will leak when memory allocation fails. Fix this by adding the missing posixaclrelease...

UBUNTU-CVE-2023-53061

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2open Reference count of acls will leak when memory allocation fails. Fix this by adding the missing posixaclrelease...

CVE-2023-53061

CVE-2023-53061 affects the Linux kernel (ksmbd) and describes a refcount leak in smb2_open() where the reference count of acls can leak if memory allocation fails. The fix adds the missing posix_acl_release() to prevent the leak. Connected documents confirm the vulnerability was addressed in the ...

CVE-2022-49908

CVE-2022-49908 affects the Linux kernel Bluetooth path, where a memory leak could occur in L2CAP/vhci_write: when an ACL fragment lacks the L2CAP length, the HCI core may copy the skb to conn->rx_skb and finish processing without freeing it. The provided patches fix this by releasing the relat...

kernel: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fix memory leak during rehash The Linux kernel CVE team has assigned CVE-2024-35853 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051740-CVE-2024-35853-869a@gregkh/T...

Important: kernel-livepatch-4.14.355-275.603

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfsbtreecheckdelete CVE-2024-47757 In the Linux kernel, the following vulnerability has been resolved: ext4: fix double brelse the buffer of the extents path CVE-2024-49882 In t...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free of encap entry in neigh update handler CVE-2021-47247 In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Fix UAF during logout when accessing the shos...

CVE-2025-46489

CVE-2025-46489 affects the WordPress plugin Bulk Assign Linked Products For WooCommerce (versions ≤ 2.1). Root cause: Missing Authorization, enabling access to functionality not properly constrained by ACLs. CVSS v3.1 base score 5.3 (Medium); impact is limited to confidentiality? None, integrity/...

PT-2025-22290 · Unknown · Fw-Wgs-804Hpt

Name of the Vulnerable Software and Affected Versions: FW-WGS-804HPT version 1.305b241111 Description: A stack overflow issue was discovered via the byruleEditName parameter in the web acl mgmt Rules Edit postcontains function. Recommendations: For FW-WGS-804HPT version 1.305b241111, consider...

SUSE CVE-2025-22070

In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounted with option 'posixacl', parent directory had a default ACL set for its subdirectories, e.g.: setfacl -m default:group:simpsons:rwx parentdir then creating a...

PT-2025-22358

Name of the Vulnerable Software and Affected Versions FW-WGS-804HPT version 1.305b241111 Description A stack overflow issue was discovered in the web acl ipv4BasedAceAdd function via the ipv4Aclkey parameter. Recommendations For FW-WGS-804HPT version 1.305b241111, as a temporary workaround,...

CVE-2025-22070

In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounted with option 'posixacl', parent directory had a default ACL set for its subdirectories, e.g.: setfacl -m default:group:simpsons:rwx parentdir then creating a...

UBUNTU-CVE-2025-22070

In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounted with option 'posixacl', parent directory had a default ACL set for its subdirectories, e.g.: setfacl -m default:group:simpsons:rwx parentdir then creating a...

CVE-2025-22070

The CVE-2025-22070 issue affects the Linux kernel 9P client (9p/v9fs) where mkdir could crash a mounted 9p tree when posixacl is used. Root cause: v9fs_vfs_mkdir_dotl() incorrectly passes a NULL fid to v9fs_set_create_acl(), leading to a NULL pointer dereference in v9fs_set_acl and subsequent ACL...

CVE-2025-22070 fs/9p: fix NULL pointer dereference on mkdir

In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounted with option 'posixacl', parent directory had a default ACL set for its subdirectories, e.g.: setfacl -m default:group:simpsons:rwx parentdir then creating a...

CVE-2025-22070 fs/9p: fix NULL pointer dereference on mkdir

In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounted with option 'posixacl', parent directory had a default ACL set for its subdirectories, e.g.: setfacl -m default:group:simpsons:rwx parentdir then creating a...