PT-2025-51632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the CIFS implementation, specifically within the smb3 fs context parse param function. The issue arises when processing Opt source mount option...

Dependency-Track Front-End Cross-Site Script Vulnerabilities

Dependency-Track Front-End is a Dependency-Track open source front-end UI for dependency tracking. A cross-site scripting vulnerability exists in Dependency-Track Front-End versions 4.12.0 through prior to 4.13.6, which stems from improper HTML cleanup and could lead to arbitrary JavaScript...

PT-2025-49080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mlx5 irq alloc function in the Linux kernel could inadvertently free the entire rmap, leading to a crash when request irq fails due to exhausted IRQ vectors. This issue occurs when...

Linux kernel binderTransactionBufferRelease Heap Buffer Overflow DoS

The vulnerability of the binderTransactionBufferRelease function in the drivers/android/binder.c module of the Linux operating system’s kernel is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

dmaengine: idxd: Refactor remove call with idxd_cleanup() helper

...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the myrscleanup function in the drivers/scsi/myrs.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Ethernet driver Heap Buffer Overflow DoS

The vulnerability of the ixgbevfinitmodule function in the drivers/net/ethernet/intel/ixgbevf/ixgbevfmain.c file of the Linux kernel’s Ethernet driver framework is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a...

intel_engines_init DRI DoS

The vulnerability of the intelenginesinit function in the drivers/gpu/drm/i915/gt/intelenginecs.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernel, is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an...

PT-2025-51711

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The CAN driver within the Linux kernel contains an issue in the gs usb xmit callback function related to the handling of failed transmitted URBs. The driver does not properly clean up...

CVE-2025-64746

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.13.0, Directus does not properly clean up field-level permissions when a field is deleted. When a field is removed from a collection, its reference in the permissions table remains intact. This...

mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop

...

SUSE CVE-2025-40161

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The driver incorrectly determines SGI vs SPI interrupts by checking IRQ number 16, which fails with dynamic IRQ allocation. During unbind, this causes improper SGI cleanup leading to...

SUSE CVE-2025-40165

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: m2m: Fix streaming cleanup on release If streamon/streamoff calls are imbalanced, such as when exiting an application with Ctrl+C when streaming, the m2m usagecount will never reach zero and the ISI channel...

SUSE CVE-2025-40166

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Check GuC running state before deregistering exec queue In normal operation, a registered exec queue is disabled and deregistered through the GuC, and freed only after the GuC confirms completion. However, if the driv...

SUSE CVE-2025-40180

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop The cleanup loop was starting at the wrong array index, causing out-of-bounds access. Start the loop at the correct index for zero-indexed arrays to prevent...

Linux bpf_exec_tx_verdict Heap Buffer Overflow DoS

The vulnerability of the bpfexectxverdict function in the Linux operating system’s bpf component is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux __populate_section_memmap Heap Buffer Overflow DoS

The vulnerability of the populatesectionmemmap function in the Linux operating system is related to improper cleanup or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Access Control Bypass

Overview @directus/api is a real-time API and App dashboard for managing SQL database content Affected versions of this package are vulnerable to Access Control Bypass due to improper cleanup of field-level permissions when a field is deleted. An attacker can gain unauthorized access to data by...

CVE-2025-40175

In the Linux kernel, the following vulnerability has been resolved: idpf: cleanup remaining SKBs in PTP flows When the driver requests Tx timestamp value, one of the first steps is to clone SKB using skbget. It increases the reference counter for that SKB to prevent unexpected freeing by another...

org.keycloak.protocol.oidc.endpoints.LogoutEndpoint: Offline Session takeover due to reused Authentication Session ID

A flaw was found in Keycloak. In Keycloak where a user can accidentally get access to another user's session if both use the same device and browser. This happens because Keycloak sometimes reuses session identifiers and doesn’t clean up properly during logout when browser cookies are missing. As...