kernel: idpf: fix memory leaks and crashes while performing a soft reset

In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leaks and crashes while performing a soft reset The second tagged commit introduced a UAF, as it removed restoring qvector-vport pointers after reinitializating the structures. This is due to that all queue...

RHEL 9 : osbuild and osbuild-composer (RHSA-2025:7118)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:7118 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

Important: osbuild and osbuild-composer security update

A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes:...

CVE-2025-37835

CVE-2025-37835 is rejected/withdrawn by the CVE Numbering Authority and not an active vulnerability entry.

CBL Mariner 2.0 Security Update: libsoup (CVE-2025-46420)

The version of libsoup installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46420 advisory. - A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function wh...

The vulnerability of the Platform V Pangolin DB database management system, related to data conflicts in BIO structures of OpenSSL, allows attackers to overwrite critical data, limit the ability to establish SSL connections, and cause data leaks from the process’s memory.

The vulnerability of the Platform V Pangolin DB database management system is related to a data conflict in the BIO structures of OpenSSL. Exploiting this vulnerability can allow an attacker to overwrite critical data, limit the ability to establish SSL connections, and cause data leaks from the...

Azure Linux 3.0 Security Update: libsoup (CVE-2025-46420)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-46420 advisory. - A flaw was found in libsoup. It is vulnerable to memory leaks in the soupheaderparsequalitylist function wh...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-58063)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58063 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: fix memory leaks and...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for April 2025.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.1-IF002 and IBM Business Automation Insights 24.0.0-IF003 Vulnerability Details CVEID:CVE-2025-1634 DESCRIPTION: A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client...

wifi: rtlwifi: fix memory leaks and invalid access at probe error path

...

CVE-2023-53115

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix memory leaks in mpi3mrinitioc Don't allocate memory again when IOC is being reinitialized...

CVE-2025-37764

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix firmware memory leaks Free the memory used to hold the results of firmware image processing when the module is unloaded. Fix the related issue of the same memory being leaked if processing of the firmware ima...

SUSE CVE-2022-49812

In the Linux kernel, the following vulnerability has been resolved: bridge: switchdev: Fix memory leaks when changing VLAN protocol The bridge driver can offload VLANs to the underlying hardware either via switchdev or the 8021q driver. When the former is used, the VLAN is marked in the bridge...

SUSE CVE-2022-49837

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memory leaks in checkfunccall kmemleak reports this issue: unreferenced object 0xffff88817139d000 size 2048: comm "testprogs", pid 33246, jiffies 4307381979 age 45851.820s hex dump first 32 bytes: 01 00 00 00 00 00 00 00...

SUSE CVE-2023-53115

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix memory leaks in mpi3mrinitioc Don't allocate memory again when IOC is being reinitialized...

DEBIAN-CVE-2023-53115

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix memory leaks in mpi3mrinitioc Don't allocate memory again when IOC is being reinitialized...

CVE-2023-53068

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Limit packet length to skb-len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory content...

UBUNTU-CVE-2023-53115

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix memory leaks in mpi3mrinitioc Don't allocate memory again when IOC is being reinitialized...

CVE-2023-53115 scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc()

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix memory leaks in mpi3mrinitioc Don't allocate memory again when IOC is being reinitialized...

SUSE CVE-2025-37764

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix firmware memory leaks Free the memory used to hold the results of firmware image processing when the module is unloaded. Fix the related issue of the same memory being leaked if processing of the firmware ima...