K000158999: Linux kernel vulnerability CVE-2025-38628

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix release of uninitialized resources on error path The commit in the fixes tag made sure that mlx5vdpafree is the single entrypoint for removing the vdpa device resources added in...

xorg: xwayland: Use-after-free in Xkb client resource removal

A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...

xorg: xwayland: Use-after-free in Xkb client resource removal

A flaw was discovered in the X.Org X server’s X Keyboard Xkb extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can cause memory corruption or a crash when affected...

D-Link多款产品 访问控制错误漏洞

The D-Link DSL-2740R and other products are products of China AUO D-Link.The D-Link DSL-2740R is a high-performance ADSL router.The D-Link DSL-2640B is a wireless ADSL routed broadband cat.The D-Link DSL-2780B is a wireless ADSL routed broadband cat.The D-Link DSL-2780B is a wireless ADSL routed...

WordPress plugin ShopBuilder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2026-5538

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc5+ 115 Description The Linux kernel contains a flaw in the mlx5e network driver. Specifically, the mlx5e priv structure, which is unstable, could be cleared if profile attachment failed. This issue occur...

PT-2026-8139

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DAMON sysfs interface. Specifically, when a context DAMON sysfs directory setup fails after the setup of the ‘attrs/’ directory, the subdirectories...

PT-2026-5541

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the nfs4 ff alloc deviceid node function within the pnfs/flexfiles component. If memory allocation for ds versions fails, the function does not free the already...

PT-2026-5540

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s etas es58x CAN driver where a partial allocation of RX URBs could lead to a memory leak. Specifically, the es58x alloc rx urbs function, when failing ...

PT-2026-26117

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the net/liquidio module related to memory management during device setup and cleanup. Specifically, a flaw exists in the setup nic devices...

PT-2026-8155

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the octep device setup function within the Linux kernel. Specifically, if octep ctrl net init fails, the function returns without releasing allocated memory and...

PT-2026-8190

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the tegra slink probe function within the SPI subsystem of the Linux kernel. Specifically, when platform get irq fails, the function returns with an error without...

PT-2026-27702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the pinconf generic parse dt config function within the pin control subsystem. If the parse dt cfg function fails, the cleanup logic is bypassed, resulting in a...

PT-2026-6147

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the mm/vma subsystem, specifically related to merging Virtual Memory Areas VMAs after a memory remapping operation mremap. The...

PT-2026-8132

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the unittest data add function within the Linux kernel. If of resolve phandles fails, the allocated unittest data is not freed, resulting in a memory leak. The fi...

PT-2026-27751

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the gve module related to incorrect buffer cleanup within the gve tx clean pending packets function when operating in DQ-QPL mode. This occurs becau...

PT-2026-8168

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0 156 Description The Linux kernel contained a flaw in the net/mlx5e module related to Traffic Control TC steering flows. Specifically, the issue occurred during the deletion of TC steering flows, where the...

PT-2026-6111

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19-rc3 Description The Broadcom network driver in the Linux kernel contains a flaw related to PTP Precision Time Protocol handling. Specifically, a NULL pointer dereference can occur in the bnxt ptp enable...

PT-2026-8145

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a memory leak in the NFC LLCP Logical Link Control Protocol implementation, specifically within the nfc llcp send ui frame function. The issue stemmed from a...

CVE-2023-54199

In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix null ptr access in adrenogpucleanup Fix the below kernel panic due to null pointer access: 18.504431 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000048 18.513464 Mem abort inf...