OESA-2025-1625 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: xen: Fix the issue of resource not being properly released in xenbusdevprobe This patch fixes an issue in the function xenbusdevprobe. In the xenbusdevprobe...

The vulnerability in the virtual server of the Control Plane Listener of the network traffic control and management system BIG-IP Policy Enforcement Manager allows a attacker to cause a service failure.

The vulnerability of the Control Plane Listener virtual server in the BIG-IP Policy Enforcement Manager network traffic control and management system is related to the failure to release resources after their expiration. Exploiting this vulnerability allows a malicious actor to cause service...

The vulnerability of the free_pages_prepare() function in the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the freepagesprepare function in the Linux kernel’s memory management subsystem is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of D-Link DI-7003GV2 router microprogramming software, related to improper cleaning or release of resources, allows a intruder to trigger a service failure.

The vulnerability of D-Link DI-7003GV2 router microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

CVE-2022-32589

In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07030600; Issue ID: ALPS07030600...

Improper Resource Shutdown or Release

Overview org.eclipse.jetty:jetty-server is a lightweight highly scalable java based web server and servlet engine. Affected versions of this package are vulnerable to Improper Resource Shutdown or Release due to an error in handling gzip compression in the GzipHandler. An attacker can corrupt dat...

CVE-2023-53045

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uaudio: don't let userspace block driver unbind In the unbind callback for fuac1 and fuac2, a call to sndcardfree via gaudiocleanup will disconnect the card and then wait for all resources to be released, which happe...

The vulnerability of the sev_receive_start() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the sevreceivestart function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to...

DEBIAN-CVE-2022-49873

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix wrong reg type conversion in releasereference Some helper functions will allocate memory. To avoid memory leaks, the verifier requires the eBPF program to release these memories by calling the corresponding helper...

CVE-2022-49873

The CVE-2022-49873 entry concerns the Linux kernel eBPF verifier. The release_reference() path could leave memory-allocated resources unfreed, causing registers tied to released pointers to be marked as SCALAR_VALUE, which in turn may allow an unprivileged user to observe a kernel pointer when st...

CVE-2022-49854 mctp: Fix an error handling path in mctp_init()

In the Linux kernel, the following vulnerability has been resolved: mctp: Fix an error handling path in mctpinit If mctpneighinit return error, the routes resources should be released in the error handling path. Otherwise some resources leak...

CVE-2022-49796 tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit()

In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on tracearray in kprobeeventgentestexit When testgenkprobecmd failed after kprobeeventgencmdend, it will goto delete, which will call kprobeeventdelete and release the corresponding...

The vulnerability of the smcd_v2_ext_offset() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smcdv2extoffset function in the Linux operating system is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Premature Release of Resource During Expected Lifetime

Overview Affected versions of this package are vulnerable to Premature Release of Resource During Expected Lifetime when connections are refused in wxWebRequestCURL. An attacker can cause the application to crash by sending malformed or unexpected requests that the library fails to handle properl...

The vulnerability of the ipheth_rcvbulk_callback() function in the Linux kernel’s USB device driver support mechanism allows a hacker to induce a service failure.

The vulnerability of the iphethrcvbulkcallback function in the Linux kernel’s USB device driver support routine is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules, related to resource release errors, allows attackers to trigger a service failure.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to errors during resource release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Vulnerability of the amdgpu_get_xgmi_hive() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_xgmi.c module – A driver for supporting AMD GPU cores in Linux operating systems, which allows a hacker to cause a service failure

Vulnerability of the amdgpugetxgmihive function in the drivers/gpu/drm/amd/amdgpu/amdgpuxgmi.c module – The Linux kernel driver for AMD GPU Direct Rendering Infrastructure supports is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cau...

The vulnerability in the driver/gpu/drm/vc4/vc4_hdmi.c kernel component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/gpu/drm/vc4/vc4hdmi.c kernel component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the slim_do_transfer() function in the driver’s code (drivers/slimbus/messaging.c) in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the slimdotransfer function in the driver’s code drivers/slimbus/messaging.c in Linux operating systems is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...