CVE-2026-14697

CVE-2026-14697 is a packet-leak denial-of-service in Zephyr RTOS . The function net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c permanently leaks a transmit net_pkt when called with a data packet pending on an unresolved neighbor whose pending_queue is already non-empty: it appends the data packet...

CVE-2026-14696

Zephyr RTOS Ethernet bridging contains an RX packet leak in eth_bridge_input_process() (subsys/net/l2/ethernet/bridge/bridge_input.c). When Ethernet bridging is enabled (CONFIG_NET_ETHERNET_BRIDGE), frames delivered to the local stack via eth_bridge_handle_locally() return NET_OK without actually...

SUSE CVE-2026-64144

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb-setuppacket leak in error paths The setuppacket of control urb is not freed if usbsubmiturb fails or the submitted urb is killed. Add free in these two paths...

CVE-2026-64144

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb-setuppacket leak in error paths The setuppacket of control urb is not freed if usbsubmiturb fails or the submitted urb is killed. Add free in these two paths...

CVE-2026-64144

CVE-2026-64144 is a memory leak in the Linux kernel's Bluetooth MediaTek (btmtk) driver . The setup_packet of a control URB is not freed when usb_submit_urb fails or the submitted URB is killed. A local attacker with low privileges can repeatedly trigger these error paths during USB Bluetooth ope...

CVE-2026-64144

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb-setuppacket leak in error paths The setuppacket of control urb is not freed if usbsubmiturb fails or the submitted urb is killed. Add free in these two paths...

EUVD-2026-45829

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb-setuppacket leak in error paths The setuppacket of control urb is not freed if usbsubmiturb fails or the submitted urb is killed. Add free in these two paths...

EUVD-2026-45501

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadvhardifdisableinterface - ... - batadvvogmifacedisable. In this process, the skb aggrlist is also...

PT-2026-61461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Bluetooth btmtk driver. The setup packet of the control urb is not properly freed when usb submit urb fails or when the submitted urb is killed. Recommendatio...

CVE-2025-10543

In Eclipse Paho Go MQTT v3.1 library paho.mqtt.golang versions =1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 bytes. This may lead to unexpected content in packets sent to the server for example, part of an MQTT topic may leak into...

Linux Distros Unpatched Vulnerability : CVE-2025-22005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhcpcpurthoutput in fibchecknhv6gw. fibchecknhv6gw expects that...

Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059170 fixes several issues. The following security issues were fixed: CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1232637...

Telindus 1100 Series Router - Administration Password Leak

// source: https://www.securityfocus.com/bid/4946/info The 1100 series routers are a broadband connectivity solution distributed by Telindus. Under some circumstances, a vulnerable Telindus router may leak sensitive information. When an attempt to connect to the router is made using the...