8249 matches found
CVE-2022-50573
The connected documents confirm CVE-2022-50573 affects the Linux kernel WiFi driver for mt76/mt7915, specifically the function mt7915_rate_txpower_get() with resource leaks (Coverity ID 1527799). A fix was applied in the kernel to address the leaks. Practical impact and exploitation details are n...
CVE-2022-50573 wifi: mt76: mt7915: fix mt7915_rate_txpower_get() resource leaks
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix mt7915ratetxpowerget resource leaks Coverity message: variable "buf" going out of scope leaks the storage. Addresses-Coverity-ID: 1527799 "Resource leaks"...
EUVD-2022-54921
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: host: Stop setting the ACPI companion It is no longer needed. The sysdev pointer is now used when assigning the ACPI companions to the xHCI ports and USB devices. Assigning the ACPI companion here resulted in the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987677)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987677 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: sdio: fix possible resource leaks in some error paths If sdioaddfunc or sdioinitfunc fails,...
PT-2026-2523
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to fuse argument copies when using fuse-over-io-uring. Specifically, a missing copy finish function can lead to a reference count leak of payloa...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987681)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987681 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks ofgetchildbyname returns a node pointe...
A week in security (October 13 – October 19)
Last week on Malwarebytes Labs: Prosper data breach puts 17 million people at risk of identity theft Under the engineering hood: Why Malwarebytes chose WordPress as its CMS Video call app Huddle01 exposed 600K+ user logs Mango discloses data breach at third-party provider Roku accused of selling...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper initialization of reference counts in the netfsallocrequest function, which could lead to reference...
CVE-2025-62668
Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Resource Leak Exposure.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-53261: coresight: Fix memory leak in acpibuffer-pointer bsc1249770. CVE-2024-46733: btrfs: fix qgroup reserve leaks in cowfilerange bsc1230708...
SUSE-SU-2025:03634-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpibuffer-pointer bsc1249770. - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cowfilerange bsc1230708. -...
WebRTC Metadata and IP Leakage in Modern Browsers: A Cross-Platform Measurement Study
Web Real-Time Communication WebRTC enables real-time peer-to-peer communication, but its Interactive Connectivity Establishment ICE process can unintentionally expose internal and public IP addresses as metadata. This paper presents a cross-platform measurement study of WebRTC metadata leakage...
Security Bulletin: Technical Support Appliance - possible security flaw in managing memory
Summary A flaw in the KASAN Kernel Address Sanitizer code may allow memory to be accessed that is no longer used, potentially exposing security related information. Vulnerability Details CVEID:CVE-2021-47670 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: can:...
SUSE-SU-2025:03614-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev-devname,shortname bsc1246968. - CVE-2022-50242: drivers: net: qlcnic: Fix potential memory leak in...
USN-7825-1: MuPDF vulnerabilities
It was discovered that MuPDF incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. CVE-2018-1000036 It was discovered that MuPDF could enter an infinite loop when parsing certain P...
USN-7825-1 mupdf vulnerabilities
It was discovered that MuPDF incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. CVE-2018-1000036 It was discovered that MuPDF could enter an infinite loop when parsing certain P...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : MuPDF vulnerabilities (USN-7825-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7825-1 advisory. It was discovered that MuPDF incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.1 security update
Important: Red Hat OpenShift GitOps v1.18.1 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-7606 ApplicationSet: Bitbucket SCM/PR generator leaks HTTP connections GITOPS-7953 Default resource exclusions list not updated in ArgoCD CR...
