The vulnerability of the smb2_compound_op() function in the fs/smb/client/smb2inode.c module, which is part of the SMB client support in Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the smb2compoundop function in the fs/smb/client/smb2inode.c module, which is part of the SMB client support in Linux kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the xsk_diag_fill() function in the net/xdp/xsk_diag.c module, which is part of the networking functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xskdiagfill function in the net/xdp/xskdiag.c module, which implements networking functions for the Linux operating system’s kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the allocate_mr_list() function in the fs/cifs/smbdirect.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the allocatemrlist function in the fs/cifs/smbdirect.c module of the Linux kernel file system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

Vulnerabilities of the mlx5e_skb_fifo_pop() and mlx5e_ptphandle_ts_cqe() functions in the Linux operating system, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerabilities of the mlx5eskbfifopop and mlx5eptphandletscqe functions in the Linux operating system are related to the reutilization of previously released memory. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the hci_conn_unlink() function in the net/bluetooth/hci_conn.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the hciconnunlink function in the net/bluetooth/hciconn.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the do_rbd_add() function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dorbdadd function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver is related to the reutilization of previously freed memory, as a result of the release of the rbddev structure’s fields spec and opts. Exploiting this vulnerability could allow ...

The vulnerability of the ksmbd_tree_conn_lookup() function in the fs/ksmbd/mgmt/tree_connect.c module of the SMB-server kernel subsystem of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ksmbdtreeconnlookup function in the fs/ksmbd/mgmt/treeconnect.c module of the SMB-server subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerabilities of the functions free_irq_cpu_rmap(), irq_cpu_rmap_release(), and irq_cpu_rmap_add() in the lib/cpu_rmap.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions freeirqcpurmap, irqcpurmaprelease, and irqcpurmapadd in the lib/cpurmap.c module of the Linux operating system are related to the reutilization of previously freed memory. Exploiting these vulnerabilities could allow an attacker to compromise the...

The vulnerabilities of the functions run_lwt_bpf() and bpf_lwt_xmit_reroute() in the net/core/lwt_bpf.c module, which are part of Linux’s kernel-based networking functions support, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions runlwtbpf and bpflwtxmitreroute in the net/core/lwtbpf.c module relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

The vulnerability in the mtk_drmBind() function of the drivers/gpu/drm/mediatek/mtk_drm_drv.c driver, a component of the Direct Rendering Infrastructure (DRI) graphics card driver for Mediatek’s Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mtkdrmbind function in the drivers/gpu/drm/mediatek/mtkdrmdrv.c driver for the Direct Rendering Infrastructure DRI of Mediatek graphics cards in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an...

ROS-20260317-73-0017

A vulnerability in the qfqaggregate function of the Linux operating system kernel is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Google Chrome TextEncoding Resource Management Error Vulnerability

Google Chrome is a free web browser developed by Google Inc. A security vulnerability exists in Google Chrome TextEncoding, which originates from re-referencing or using freed memory, and can be exploited by remote attackers to execute arbitrary code...

ROS-20260317-73-0025

A vulnerability in the cryptmessage function in the fs/smb/client/smb2ops.c module of the SMB client support module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability...

The vulnerability of the irdmaDestroy_cq() function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver for InfiniBand allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the irdmaDestroycq function in the drivers/infiniband/hw/irdma/verbs.c module of the Linux kernel’s InfiniBand driver is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerabilities of the functions arch_dup_task_struct() and copy_thread() in the arch/s390/kernel/process.c module of the S390 platform support module of the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the functions archduptaskstruct and copythread in the arch/s390/kernel/process.c module, which is part of the S390 platform support for the Linux operating system, relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the iwl_op_mode_dvm_start() function in the main.c file of the drivers/net/wireless/intel/iwlwifi/dvm module of the Intel wireless networking driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the iwlopmodedvmstart function in the main.c file of the drivers/net/wireless/intel/iwlwifi/dvm module of the Intel wireless networking driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an...

The vulnerability of the shutdown_interception() function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the shutdowninterception function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the airoha_npu_get() function in the drivers/net/ethernet/airoha/airoha_npu.c file of the Linux kernel’s network adapter driver module allows a hacker to cause a service failure.

The vulnerability of the airohanpuget function in the drivers/net/ethernet/airoha/airohanpu.c file of the Linux kernel’s Ethernet network adapter driver is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the f2fs_free_dic() function in the fs/f2fs/compress.c module of the F2FS file system in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the f2fsfreedic function in the fs/f2fs/compress.c module of the F2FS file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in smb.c, which may reuse already freed memory from a previous SMB connection request. The window of opportunity to exploit this is small, and the region of memory exposed is small and out of the attacker's control...