CVE-2023-54269 SUNRPC: double free xprt_ctxt while still in use

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprtctxt while still in use When an RPC request is deferred, the rqxprtctxt pointer is moved out of the svcrqst into the svcdeferredreq. When the deferred request is revisited, the pointer is copied into the n...

CVE-2022-50821

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...

CVE-2022-50821 SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gssreadproxyverf fails...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly cleaning up the rqxprtctxt pointer in SUNRPC, which could lead to a double release...

PT-2026-43737

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory leaks occur in the SUNRPC auth gss component during XDR decoding error paths. The functions gssx dec ctx, gssx dec status, and gssx dec name allocate memory using gssx dec buffer,...

EUVD-2022-55760

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix resource leak in ksmbdsessionrpcopen When ksmbdrpcopen fails then it must call ksmbdrpcidfree to undo the result of ksmbdipcidalloc...

CVE-2022-50729

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix resource leak in ksmbdsessionrpcopen When ksmbdrpcopen fails then it must call ksmbdrpcidfree to undo the result of ksmbdipcidalloc...

CVE-2022-50729

CVE-2022-50729 concerns a Linux kernel issue in the ksmbd component where a resource leak occurs in ksmbd_session_rpc_open(). The underlying cause, as described in the available documents, is that when ksmbd_rpc_open() fails, ksmbd_rpc_id_free() must be called to undo the result of ksmbd_ipc_id_a...

CVE-2022-50729 ksmbd: Fix resource leak in ksmbd_session_rpc_open()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix resource leak in ksmbdsessionrpcopen When ksmbdrpcopen fails then it must call ksmbdrpcidfree to undo the result of ksmbdipcidalloc...

Server-Side Request Forgery (SSRF)

@lobehub/chat is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation and restriction of user-supplied URLs in the tools.search.crawlPages tRPC endpoint, which allows an attacker with a valid token to supply arbitrary URLs and force the server to mak...

PT-2025-53033

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the ksmbd session rpc open function within the kernel's ksmbd component. When ksmbd rpc open fails, it does not properly call ksmbd rpc id free to release...

Malicious Package

Overview rpc-validate is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in rpc-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c08295788ac997e7566fad616096d89ea31e26771abbd32fb6d42f199875f2 The package rpc-validate was found to contain malicious code. Source: ghsa-malware 95f6f8651242afb77a3d28835bf912aacbfc4e3abbc3da2313fb6c3bd0c12ed1 A...

EUVD-2025-204876

Malicious code in rpc-validate npm...

MAL-2025-192749 Malicious code in rpc-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c08295788ac997e7566fad616096d89ea31e26771abbd32fb6d42f199875f2 The package rpc-validate was found to contain malicious code. Source: ghsa-malware 95f6f8651242afb77a3d28835bf912aacbfc4e3abbc3da2313fb6c3bd0c12ed1 A...

CVE-2025-68382

Out-of-bounds read CWE-125 allows an unauthenticated remote attacker to perform a buffer overflow CAPEC-100 via the NFS protocol dissector, leading to a denial-of-service DoS through a reliable process crash when handling truncated XDR-encoded RPC messages...

CVE-2025-68382

CVE-2025-68382 describes an out-of-bounds read (CWE-125) in the NFS protocol dissector used by Elastic Packetbeat/Elastic Beats components, enabling an unauthenticated remote attacker to trigger a buffer overflow and cause a DoS (process crash) when handling truncated XDR-encoded RPC messages. Af...

PT-2025-52364

Name of the Vulnerable Software and Affected Versions Wireshark affected versions not specified Description An out-of-bounds read condition exists in the NFS protocol dissector. This allows a remote, unauthenticated attacker to trigger a buffer overflow when processing truncated XDR-encoded RPC...

CVE-2025-68382: Out-of-bounds Read

Out-of-bounds read CWE-125 allows an unauthenticated remote attacker to perform a buffer overflow CAPEC-100 via the NFS protocol dissector, leading to a denial-of-service DoS through a reliable process crash when handling truncated XDR-encoded RPC messages...

Incorrect Resource Transfer Between Spheres

Overview apache-airflow-providers-edge3 is a Provider package apache-airflow-providers-edge3 for Apache Airflow Affected versions of this package are vulnerable to Incorrect Resource Transfer Between Spheres via the Edge3 Worker RPC. An attacker can execute arbitrary code in the web-server contex...