730 matches found
SUSE CVE-2023-53651
In the Linux kernel, the following vulnerability has been resolved: Input: exc3000 - properly stop timer on shutdown We need to stop the timer on driver unbind or probe failures, otherwise we get UAF/Oops...
kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...
EUVD-2025-31830
File upload leading to remote code execution RCE in the “melis-cms-slider” module of Melis Technology's Melis Platform. This vulnerability allows an attacker to upload a malicious file via a POST request to '/melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm' using the 'mcsdetailimg'...
Linux Distros Unpatched Vulnerability : CVE-2025-39921
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: microchip-core-qspi: stop checking viability of op-maxfreq in supportsop callback In commit 13529647743d9 spi: microchip-core-qspi: Support per spi-mem...
UBUNTU-CVE-2022-50545
In the Linux kernel, the following vulnerability has been resolved: r6040: Fix kmemleak in probe and remove There is a memory leaks reported by kmemleak: unreferenced object 0xffff888116111000 size 2048: comm "modprobe", pid 817, jiffies 4294759745 age 76.502s hex dump first 32 bytes: 00 c4 0a 04...
EUVD-2025-32808
In the Linux kernel, the following vulnerability has been resolved: media: si470x: Fix use-after-free in si470xintincallback syzbot reported use-after-free in si470xintincallback 1. This indicates that urb-context, which contains struct si470xdevice object, is freed when si470xintincallback is...
CVE-2023-53651
CVE-2023-53651 affects the Linux kernel where a timer was not properly stopped on driver unbind or probe failures, potentially causing use-after-free/oops. The published connected advisories indicate the issue is in the kernel input path for exc3000 and that fixes exist in updated kernel packages...
CVE-2023-53651 Input: exc3000 - properly stop timer on shutdown
In the Linux kernel, the following vulnerability has been resolved: Input: exc3000 - properly stop timer on shutdown We need to stop the timer on driver unbind or probe failures, otherwise we get UAF/Oops...
CVE-2023-53651 Input: exc3000 - properly stop timer on shutdown
In the Linux kernel, the following vulnerability has been resolved: Input: exc3000 - properly stop timer on shutdown We need to stop the timer on driver unbind or probe failures, otherwise we get UAF/Oops...
EUVD-2025-32761
In the Linux kernel, the following vulnerability has been resolved: Input: exc3000 - properly stop timer on shutdown We need to stop the timer on driver unbind or probe failures, otherwise we get UAF/Oops...
EUVD-2018-3316
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987037)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987037 advisory. In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of IO mapping on probe failure On probe error the driver should unmap th...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987140)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987140 advisory. In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of private memory on probe failure On probe error the driver should free...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-409587)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-409587 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aacprobeone calls hardware-specific init function...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987076)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987076 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: megaraidsas: Fix resource leak in case of probe failure The driver doesn't clean up all the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987004)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987004 advisory. In the Linux kernel, the following vulnerability has been resolved: net: phy: fix null-ptr-deref while probe failed I got a null-ptr-deref report as following when...
PT-2025-41095
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel where a timer is not properly stopped during shutdown, driver unbind, or probe failures. This can lead to a use-after-free condition and potential syste...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to stop a timer when a driver is unbound or a probe fails, which could lead to reuse after release...
SUSE CVE-2025-39951
In the Linux kernel, the following vulnerability has been resolved: um: virtiouml: Fix use-after-free after putdevice in probe When registervirtiodevice fails in virtioumlprobe, the code sets vudev-registered = 1 even though the device was not successfully registered. This can lead to...
EUVD-2025-32381
In the Linux kernel, the following vulnerability has been resolved: um: virtiouml: Fix use-after-free after putdevice in probe When registervirtiodevice fails in virtioumlprobe, the code sets vudev-registered = 1 even though the device was not successfully registered. This can lead to...