CVE-2025-40017 media: iris: Fix memory leak by freeing untracked persist buffer

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix memory leak by freeing untracked persist buffer One internal buffer which is allocated only once per session was not being freed during session close because it was not being tracked as part of internal buffer li...

CVE-2025-40017 media: iris: Fix memory leak by freeing untracked persist buffer

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix memory leak by freeing untracked persist buffer One internal buffer which is allocated only once per session was not being freed during session close because it was not being tracked as part of internal buffer li...

CVE-2025-40017

In CVE-2025-40017, the Linux kernel fix addresses a memory leak in the iris subsystem where a single internal buffer allocated per session wasn't freed because it wasn’t tracked in the internal buffer list. The remediation adds explicit logic to free the untracked internal buffer upon session clo...

PT-2025-42785

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak existed in the Linux kernel's media subsystem, specifically within the iris driver. An internal buffer allocated once per session was not being freed during session closure...

JLSEC-2025-106 In FFmpeg before 4.2, `avcodec_open2` in `libavcodec/utils.c` allows a NULL pointer dereference and...

In FFmpeg before 4.2, avcodecopen2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified other impact when there is no valid close function pointer...

SUSE CVE-2022-50555

In the Linux kernel, the following vulnerability has been resolved: tipc: fix a null-ptr-deref in tipctopsrvaccept syzbot found a crash in tipctopsrvaccept: KASAN: null-ptr-deref in range 0x0000000000000008-0x000000000000000f Workqueue: tipcrcv tipctopsrvaccept RIP: 0010:kernelaccept+0x22d/0x350...

net/smc: initialize close_work early to avoid warning

...

WordPress Open Close WooCommerce Store plugin <= 4.9.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Open Close WooCommerce Store versions = 4.9.9...

PT-2025-43811

Name of the Vulnerable Software and Affected Versions Open Close WooCommerce Store versions prior to 5.0.1 Description Incorrectly configured access control security levels allow authenticated attackers with subscriber-level access and above to perform unauthorized actions. This is caused by a...

EUVD-2020-22356

Malware in sbrugna...

EUVD-2020-6677

Malware in sbrugna...

EUVD-2020-6682

Malware in sbrugna...

EUVD-2016-4899

Malware in sbrugna...

EUVD-2016-4903

Malware in sbrugna...

EUVD-2019-4854

Malware in sbrugna...

EUVD-2021-17267

Malware in sbrugna...

EUVD-2010-2840

Malware in sbrugna...

EUVD-2013-4828

Malware in sbrugna...

EUVD-2018-0491

Malware in sbrugna...

An Empirical Study of Security-Policy Related Issues in Open Source Projects

GitHub recommends that projects adopt a SECURITY.md file that outlines vulnerability reporting procedures. However, the effectiveness and operational challenges of such files are not yet fully understood. This study aims to clarify the challenges that SECURITY.md files face in the vulnerability...