EUVD-2025-205099

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exclusive map memory leak When exclproghash is 0 and exclproghashsize is non-zero, the map also needs to be freed. Otherwise, the map memory will not be reclaimed, just like the memory leak problem reported by syzbot 1...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the fact that the gfpmask in the inode address space contains the GFPFS flag, which could lead to recursive...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible conflict between interconnect bandwidth setting locks and memory reclamation locks, which could...

The vulnerability of the exfat_free_upcase_table() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the exfatfreeupcasetable function fs/exfat/nls.c in the Linux kernel is related to a memory reallocation error. Exploiting this vulnerability could allow an attacker to cause a system failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988671)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988671 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: Do not use WQMEMRECLAIM flag for workqueue When both ice and the irdma driver are loaded, a...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-404093)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-404093 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential deadlock with newly created symlinks Syzbot reported that pagesymlink, call...

SUSE CVE-2025-38373

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix potential deadlock in MR deregistration The issue arises when kzalloc is invoked while holding umemmutex or any other lock acquired under umemmutex. This is problematic because kzalloc can trigger fsreclaimaqcuire,...

The vulnerability of the asn1_delete_structure() function in the Transport Layer Security library GnuTLS allows a attacker to cause a service failure.

The vulnerability of the asn1deletestructure function in the GnuTLS transport layer security library is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the Crossbeam-channel library’s set of tools for parallel programming allows a hacker to trigger a service failure.

The vulnerability of the Crossbeam-channel library for parallel programming lies in a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2025-39725

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix hwpoisoned large folio handling in shrinkfoliolist In shrinkfoliolist, the hwpoisoned folio may be large folio, which can't be handled by unmappoisonedfolio. For THP, trytounmapone must be passed with TTUSPLITHUGEP...

The vulnerability of the software for deploying and executing AI models developed by NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) relates to a memory reclamation error. This vulnerability allows attackers to trigger a service failure.

The vulnerability of the NVIDIA Triton Inference Server previously known as TensorRT Inference Server software for deploying and executing AI models is related to a memory reclamation error. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the amd_pmf_remove() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the amdpmfremove function in the Linux operating system is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel bus component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel bus component is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Win32 Kernel Subsystem in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32 Kernel Subsystem in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Routing and Remote Access Service (RRAS) component in operating systems allows attackers to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS component in operating systems is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the Brokering File System (BFS) in Microsoft Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Brokering File System BFS in Microsoft Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows SSDP service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows SSDP service on Microsoft Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the pki_key_to_blob() function in the libssh library allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the pkikeytoblob function in the libssh library is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

Vulnerability of the aq_ptp_ring_alloc() function in the drivers/net/ethernet/aquantia/atlantic/aq_ptp.c module – A driver for supporting Ethernet adapter cards with a Quantia Atlantic chipset in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the aqptpringalloc function in the drivers/net/ethernet/aquantia/atlantic/aqptp.c module – The Ethernet adapter driver with the aQuantia Atlantic chipset in the Linux operating system is vulnerable to a vulnerability where previously released memory is reclaimed. Exploiting this...

Vulnerability of the rxe_qp_init_req() function in the drivers/infiniband/sw/rxe/rxe_qp.c module – The Linux kernel’s InfiniBand driver, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the rxeqpinitreq function in the drivers/infiniband/sw/rxe/rxeqp.c module – The Linux kernel’s InfiniBand driver relies on the reclamation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...