CVE-2025-40227: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: dealloc commit test ctx always The damonctx for testing online DAMON parameters commit inputs is deallocated only when the test fails. This means memory is leaked for every successful online DAMON parameters commi...

CVE-2025-40218: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: do not repeat pteoffsetmaplock until success DAMON's virtual address space operation set implementation vaddr calls pteoffsetmaplock inside the page table walk callback function. This is for reading and writing pa...

CVE-2025-40228: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: catch commit test ctx alloc failure Patch series "mm/damon/sysfs: fix commit test damonctx deallocation". DAMON sysfs interface dynamically allocates and uses a damonctx object for testing if given inputs for onli...

PT-2025-49054

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the Linux kernel’s mm/damon/sysfs component. Specifically, the damon ctx used for testing online DAMON parameters commit inputs is not always deallocated, leading...

PT-2025-49055

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the mm/damon/sysfs interface. This interface dynamically allocates a damon ctx object for testing the validity of inputs for online DAMON...

PT-2025-49056

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the Linux kernel’s mm/damon/core component, specifically within the damon destroy scheme function. The function fails to properly free the ops filter resource whe...

The vulnerability of the damon_sysfs_test_add_targets() function in the mm/damon/sysfs-test.h module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the damonsysfstestaddtargets function in the mm/damon/sysfs-test.h module of the Linux kernel’s memory management subsystem is related to improper memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the damon_sysfs_mk_scheme() function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the damonsysfsmkscheme function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, relates to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the damon_feed_loop_next_input() function in the mm/damon/core.c module of the Linux operating system’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the damonfeedloopnextinput function in the mm/damon/core.c module of the Linux operating system’s memory management subsystem is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: A failure to properly deallocate memory buffers when writing to free old damonsysfsschemefilter-memcgpath. The memcgpathstore function assigns a newly allocated memory buffer to filter-memcgpath, without...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: Add a target node validity check in damonmigratepages. This validation is taken from dopagesmove, which is used in the movepages system call. The bug occurs when damonmigratepages attempts to migrate pages ev...

EUVD-2023-60053

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting XSS vulnerability when adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affecte...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2025-1223)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1223 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix use-after-free in stateshow CVE-2025-39877 In the Linux kernel, the following vulnerability has been...

EUVD-2025-31835

A security flaw has been discovered in JhumanJ OpnForm up to 1.9.3. The impacted element is an unknown function of the component API Endpoint. The manipulation results in cross-site request forgery. The attack may be performed from remote. The exploit has been released to the public and may be...

EUVD-2025-31842

A vulnerability was detected in JhumanJ OpnForm up to 1.9.3. Affected by this issue is some unknown functionality of the file /answer. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public and may be used. The patch is identified as...

Linux Distros Unpatched Vulnerability : CVE-2023-53555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: initialize damofilter-list from damosnewfilter damosnewfilter is not...

Linux Distros Unpatched Vulnerability : CVE-2025-39909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/lrusort: avoid divide-by-zero in damonlrusortapplyparameters Patch series mm/damon: avoid divide-by-zero in DAMON module's parameters application...

Linux Distros Unpatched Vulnerability : CVE-2025-39916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/reclaim: avoid divide-by-zero in damonreclaimapplyparameters When creating a new scheme of DAMONRECLAIM, the calculation of 'minageregion' uses...

SUSE CVE-2023-53555

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: initialize damofilter-list from damosnewfilter damosnewfilter is not initializing the list field of newly allocated filter object. However, DAMON sysfs interface and DAMONRECLAIM are not initializing it after calli...

CVE-2023-53555

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: initialize damofilter-list from damosnewfilter damosnewfilter is not initializing the list field of newly allocated filter object. However, DAMON sysfs interface and DAMONRECLAIM are not initializing it after calli...