Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from memory release not being handled correctly in dmisysfsregisterhandle, which could lead to null pointer...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the key exchange process. An attacker can cause gradual memory exhaustion and potential application crashes by repeatedly initiating key exchanges with incorrect guesses as an...

SUSE CVE-2025-39720

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix refcount leak causing resource not released When ksmbdconnreleasingopinfo-conn returns true,the refcount was not decremented properly, causing a refcount leak that prevents the count from reaching zero and the memory...

CVE-2025-39720

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix refcount leak causing resource not released When ksmbdconnreleasingopinfo-conn returns true,the refcount was not decremented properly, causing a refcount leak that prevents the count from reaching zero and the memory...

DEBIAN-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD), as well as in Cisco IOS and Cisco IOS XE operating systems, allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, as well as in Cisco IOS and Cisco IOS XE operating systems, is related to memory release errors. Exploitation of this vulnerability can allo...

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD), as well as in Cisco IOS and Cisco IOS XE operating systems, allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, as well as in Cisco IOS and Cisco IOS XE operating systems, is related to memory release errors. Exploitation of this vulnerability can allo...

CVE-2025-38569

CVE-2025-38569 (Linux kernel benet) arises from a bug in the be2net SR-IOV VF MAC address configuration flow where be_cmd_set_mac_list() calls dma_free_coherent() while still under spin_lock_bh, leading to a kernel crash (BUG at mm/vmalloc.c and OOPs) when SR-IOV VFs are created. The linked advis...

Huawei HarmonyOS wantagent module iterator failure vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An iterator failure vulnerability exists in the Huawei HarmonyOS wantagent module, which can be exploited by an attacker to cause a memory release failure...

CVE-2025-20077

Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some IntelR reference server platforms may allow a privileged user to enable denial of service via local access...

CVE-2025-24925

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-24844

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-20077

Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some IntelR reference server platforms may allow a privileged user to enable denial of service via local access...

CVE-2025-20077

Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some IntelR reference server platforms may allow a privileged user to enable denial of service via local access...

PT-2025-32700 · Intel · Intel Reference Server Platforms +1

Name of the Vulnerable Software and Affected Versions: IntelR reference server platforms affected versions not specified Description: A missing release of memory after its effective lifetime within the UEFI OobRasMmbiHandlerDriver module may allow a privileged user to enable a denial of service v...

Linux Distros Unpatched Vulnerability : CVE-2025-37744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix memory leak in ath12kpciremove Kmemleak reported this error: unreferenced object 0xffff1c165cec3060 size 32: comm insmod, pid 560, jiffies...

Intel reference server platforms 安全漏洞

Intel Reference Server Platforms is a reference server platform from Intel Corporation USA. A security vulnerability exists in Intel reference server platforms that stems from a missing memory release and could lead to a denial of service...

CVE-2025-27562

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-24925

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-24844

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...