CVE-2025-37764 drm/imagination: fix firmware memory leaks

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix firmware memory leaks Free the memory used to hold the results of firmware image processing when the module is unloaded. Fix the related issue of the same memory being leaked if processing of the firmware ima...

CVE-2025-37764

CVE-2025-37764 affects the Linux kernel (drm/imagination/powervr): a vulnerability causing firmware memory leaks during firmware image processing, leading to leaks on module unload and in failure paths during module load. The fix releases memory used for firmware image processing results and dest...

CVE-2025-37764

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix firmware memory leaks Free the memory used to hold the results of firmware image processing when the module is unloaded. Fix the related issue of the same memory being leaked if processing of the firmware ima...

CVE-2025-23140 misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error

In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Avoid issue of interrupts remaining after requestirq error After devmrequestirq fails with error in pciendpointtestrequestirq, the pciendpointtestfreeirqvectors is called assuming that all IRQs have been...

Auditing without Leaks Despite Curiosity

Whitepaper called Auditing Without Leaks Despite Curiosity...

PT-2025-18571 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to an error handling path in the mctp init function. If the mctp neigh init function returns an error, the...

PT-2025-18503 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the blk-cgroup, where the function blkcg css online is supposed to pin the blkcg of the parent. However,...

PT-2025-18590 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a problem in the Linux kernel's bpf Berkeley Packet Filter where a wrong type conversion in the release reference function can lead to potential memory leaks. Helper...

PT-2025-18554 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to memory leaks in the check func call function of the Linux kernel's bpf module. The problem occurs when the callee is not released in abnormal scenarios, leading...

PT-2025-18617 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue occurs in the piix4 driver, where the adapter is not properly removed when the piix4 module is removed. This happens...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an RDMA rxe RESPSTERRRNR state mr leak that could lead to resource exhaustion...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from device reference counting not being handled correctly in drmdevinit, which could lead to a memory leak...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from uninitialized value accesses that could lead to a memory leak...

Security Bulletin: Security vulnerabilities affect multiple packages shipped with IBM CICS TX Advanced.

Summary IBM CICS TX Advanced is impacted by security vulnerabilities found in packages GLib2.0, libxml2, glibc , krb5 Kerberos, libtasn1-6, Expat, OpenSSL, GnuTLS and curl. These are shipped as part of the product. Vulnerability Details CVEID:CVE-2024-12133 DESCRIPTION: A flaw in libtasn1 causes...

[SECURITY] [DSA 5907-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5907-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 27, 2025 https://www.debian.org/security/faq -...

Debian dsa-5907 : affs-modules-6.1.0-33-4kc-malta-di - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5907 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5907-1 [email protected] https://www.debian.org/securit...

CVE-2025-3628

CVE-2025-3628 affects Moodle and enables de-anonymization of anonymous assignment submissions via search, exposing student identities. Concrete details in connected sources: BIT-MOODLE-2025-3628 (OSV), GHSA-69M9-RPRC-2X7G, CNVD-2025-10582. The vulnerability is described as a information disclosur...

CVE-2025-46420

A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes...

CVE-2025-46420

A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function when parsing a quality list that contains elements with all zeroes...

BIT-CILIUM-OPERATOR-2025-32793 Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can lea...