Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly freeing memory, which could lead to a memory leak...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Improper Cleanup on Thrown Exception (CVE-2024-53059)

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix response handling in iwlmvmsendrecoverycmd 1. The size of the response packet is not validated. 2. The response buffer is not freed. Resolve these issues by switching to iwlmvmsendcmdstatus, which handles...

CVE-2025-39994

CVE-2025-39994 concerns the Linux kernel media/tuners/xc5000 driver. The root cause is a use-after-free in xc5000_release() caused by cancel_delayed_work() not guaranteeing the delayed work item timer_sleep has finished before freeing priv data. The fix replaces cancel_delayed_work() with cancel_...

GHSA-2PGJ-5CV2-6XXW FuelVM is vulnerable to heap memory allocation re-use bug

Impact A memory safety vulnerability was present in the Fuel Virtual Machine FuelVM, where memory reads could bypass expected access controls. Specifically, when a smart contract performed a mload or other opcodes which access memory on memory that had been deallocated using ret, it was still abl...

Linux Distros Unpatched Vulnerability : CVE-2025-39953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cgroup: split cgroupdestroywq into 3 workqueues A hung task can occur during 1 LTP cgroup testing when repeatedly mounting/unmounting perfevent and netprio...

EUVD-2019-2416

Malware in sbrugna...

EUVD-2019-10563

Malware in sbrugna...

EUVD-2014-0732

Malware in sbrugna...

EUVD-2021-1839

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987077)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987077 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: avoid a use-after-free when BO init fails nouveauboinit is backed by ttmboinit and...

EUVD-2024-53194

Malicious code in bioql PyPI...

EUVD-2022-55529

Malicious code in bioql PyPI...

EUVD-2022-54596

Malicious code in bioql PyPI...

PT-2025-42706

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Marvell SAS/SATA controller within the Linux kernel where a use-after-free condition can occur during device detachment. Specifically, the cancel delayed work functi...

PT-2025-44123

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ocfs2 component related to a double free in the user cluster connect function. Specifically, user cluster disconnect frees a memory region, an...

gfs2: Fix slab-use-after-free in gfs2_qd_dealloc

...

drm/amd/display: Deallocate DML memory if allocation fails

...

CVE-2025-55158 Vim double-free vulnerability during Vim9 script import operations

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tuples during Vim9 script import operations, an error during evaluation can trigger a double-free in Vim’s internal typed value typvalT management. Specifically, the cleartv...

PT-2025-36274

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified and resolved in the nvif vmm ctor function within the drm/nouveau/nvif module of the Linux kernel. The issue occurred when the nvif vmm type was invalid,...

The vulnerability of the Advanced Notification Service (ANS) management service in the HarmonyOS operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Advanced Notification Service ANS management service in the HarmonyOS operating system is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...