11695 matches found
CVE-2025-38721
CVE-2025-38721 affects the Linux kernel netfilter ctnetlink table dump path. A reference count leak in ctnetlink_dump_table() can occur if res ct_general) only when ct != last, and a cookie-based workaround is mentioned as an alternative. The Astra Linux bulletin confirms the same vulnerability i...
CVE-2025-38695 scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfcvport structure If a call to lpfcsli4readrev from lpfcsli4hbasetup fails, the resultant cleanup routine lpfcsli4vportdeletefcpxriaborted may occur before sli4hba.hdwqs are...
srcu: Tighten cleanup_srcu_struct() GP checks
...
wifi: cfg80211: clear link ID from bitmap during link delete after clean up
...
xen/events: close evtchn after mapping cleanup
...
btrfs: do proper folio cleanup when cow_file_range() failed
...
iommu: Clear iommu-dma ops on cleanup
...
PCI: pnv_php: Clean up allocated IRQs on unplug
...
usb: gadget : fix use-after-free in composite_dev_cleanup()
...
net/mlx5e: Don't call cleanup on profile rollback failure
...
Promptcraft Forge Studio security vulnerabilities
Promptcraft Forge Studio is a developer toolkit for Marcelo Tessaro Individual Developer. A security vulnerability exists in Promptcraft Forge Studio that stems from improperly cleaning up user input using a regular expression blacklist, which could lead to the execution of a malicious payload...
WordPress plugin Atec Debug: Code injection vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from inconsistent configuration when cleaning up unused classes, which could lead to a null pointer dereference...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from lpfc not checking for the hdwq null pointer when cleaning up vport structures...
firmware: arm_scmi: Fix double free in SMC transport cleanup path
...
sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
...
drm/amd/display: Deallocate DML memory if allocation fails
...
btrfs: do proper folio cleanup when run_delalloc_nocow() failed
...
JetBrains TeamCity Data Cleanup Email Modification
The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of TeamCity in JetBrains is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability could allow a malicious actor to modify the content of email...
WordPress plugin Orbit Fox by ThemeIsle has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...