CVE-2025-39674

CVE-2025-39674 affects the Linux kernel scsi: ufs: ufs-qcom path. Root cause: a regression from removing MSI descriptor abuse caused a NULL pointer dereference when Platform MSI allocation fails while configuring ESI, due to cleanup using __free() on resources that were never allocated. The issue...

The vulnerability of the net_sched component in the Linux operating system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the netsched component in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...

PT-2025-36269

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the UFS Universal Flash Storage Qualcomm qcom driver related to Enhanced System Interrupt ESI and Message Signaled Interrupts MSI. A regression...

The vulnerability of the nfs_fs_proc_net_init() function in the NFS file system of Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the nfsfsprocnetinit function in the NFS file system of Linux operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2025-38628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix release of uninitialized resources on error path The commit in the fixes tag...

The vulnerability of the Mozilla Firefox browser, related to incorrect resource cleanup or release, allows a perpetrator to cause a service failure.

The vulnerability of the Mozilla Firefox browser is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the WebRender component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the WebRender component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to improper resource cleanup or release. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the ipsla_ippm_server function in Cisco IOS, IOS XE, and Cisco IOS XR systems allows a attacker to cause a service failure.

The vulnerability of the ipslaippmserver function in Cisco IOS, IOS XE, and Cisco IOS XR is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability in the TLS processing function of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) for the Firepower 3100 Series and Firepower 4200 Series devices allows a attacker to induce a service failure.

The vulnerability of the TLS processing function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD for the Firepower 3100 Series and Firepower 4200 Series devices is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a...

AZL-73485 CVE-2025-38635 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: clk: davinci: Add NULL check in davincilpscclkregister devmkasprintf returns NULL when memory allocation fails. Currently, davincilpscclkregister does not check for this case, which results in a NULL pointer dereference. Add NULL...

CVE-2025-38628

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix release of uninitialized resources on error path The commit in the fixes tag made sure that mlx5vdpafree is the single entrypoint for removing the vdpa device resources added in mlx5vdpadevadd, even in the cleanup...

UBUNTU-CVE-2025-38628

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix release of uninitialized resources on error path The commit in the fixes tag made sure that mlx5vdpafree is the single entrypoint for removing the vdpa device resources added in mlx5vdpadevadd, even in the cleanup...

CVE-2025-38628

CVE-2025-38628 affects the Linux kernel mlx5 vdpa path. The issue was a resource cleanup bug where cleanup paths could operate on uninitialized resources, triggering a splat when adding a vdpa device without a MAC address. The fixes ensure mlx5_vdpa_free() is the single entrypoint for removing vd...

PT-2025-46765

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel's qcom-iris driver contains an issue where module removal can fail if firmware download fails. Specifically, if the firmware download for the qcom/vpu/vpu33 p4.mbn file...

The vulnerability of the Core component of the Oracle Application Object Library in the Oracle E-Business Suite, a system for automating business operations in enterprises, allows a perpetrator to cause service interruptions.

The vulnerability of the Core component of the Oracle Application Object Library in the Oracle E-Business Suite system for enterprise automation activities is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker operating remotely to cause...

The vulnerability of the Bluetooth Low Energy (BLE) technology of Realtek’s RTL8762E software allows a intruder to trigger a service failure.

The vulnerability of the Bluetooth Low Energy BLE technology of Realtek’s RTL8762E software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to trigger a service failure...

Linux Distros Unpatched Vulnerability : CVE-2025-38419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when rprochandleresources fails in rprocattach...

The vulnerability of the Admin Framework component in macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the Admin Framework component in macOS operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2024-56753

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfxv90 Module This commit addresses...

Linux Distros Unpatched Vulnerability : CVE-2025-38161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction Upon RQ destruction if the firmware command fails which is the last resource to be destroyed...