ROS-20260114-7302

A vulnerability in the rfcommsockalloc function of the net/bluetooth/rfcomm/sock.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...

FreeImage 安全漏洞

FreeImage is a cross-platform open source library for supporting popular graphic image formats from the FreeImage open source. A security vulnerability exists in FreeImage version 3.18.0, which stems from post-release reuse of the loadRLE function in PluginTARGA.cpp...

FreeRDP 资源管理错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A resource management error vulnerability exists in versions prior to FreeRDP 3.20.1 that stems from a race condition between the RDPGFX dynamic virtual channel thread and the SDL rendering thread,...

FreeRDP 资源管理错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A resource management error vulnerability exists in versions prior to FreeRDP 3.20.1, which stems from a contention condition in the serial channel IRP thread trace that could lead to heap reuse aft...

CVE-2025-68774

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix missing hfsbnodeget in hfsbnodecreate When sync and link are called concurrently, both threads may enter hfsbnodefind without finding the node in the hash table and proceed to create it. Thread A: hfspluswriteinode -...

Jervis has Deterministic AES IV Derivation from Passphrase

Vulnerability https://github.com/samrocketman/jervis/blob/157d2b63ffa5c4bb1d8ee2254950fd2231de2b05/src/main/groovy/net/gleske/jervis/tools/SecurityIO.groovyL866-L874...

GHSA-CRXP-CHH4-9GHP Jervis has Deterministic AES IV Derivation from Passphrase

Vulnerability https://github.com/samrocketman/jervis/blob/157d2b63ffa5c4bb1d8ee2254950fd2231de2b05/src/main/groovy/net/gleske/jervis/tools/SecurityIO.groovyL866-L874...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to initialize a local pointer to NULL after transferring ownership of memory, which could lead to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the possibility that tree-connected objects may be released prematurely under high concurrency, potentially...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention condition for job-pasid access during GPU recovery, which could lead to reuse after release...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not synchronizing the shutdown of a subdevice when a driver is removed, which could lead to reuse after...

ROS-20260113-7374

A vulnerability in the amdgpucspass1 function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c module of the Linux kernel is related to the re-release of previously freed memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected...

ROS-20260113-7357

A vulnerability in the prepareuprobebuffer function of the kernel/trace/traceuprobe.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected informati...

ROS-20260113-7396

A vulnerability in the amdgpudevicefinisw function of the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of...

ROS-20260113-7345

A vulnerability in the ext4fillsuper function in the fs/ext4/super.c module of the ext4 file system of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to clean up user copy references when the ublk server exits, which could lead to reuse after relea...

ROS-20260113-7355

A vulnerability in the cdnsi3cmasterremove function in the drivers/i3c/master/i3c-master-cdns.c module of the Linux kernel is related to the reuse of previously freed memory due to competitive access to a resource race condition. Exploitation of the vulnerability may allow an intruder to affect t...

ROS-20260113-7348

A vulnerability in the amdkfdfreegttmem function of the /drivers/gpu/drm/amd/amdgpu/amdgpuamdkfd.c driver of the Linux operating system kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability could allow an attacker to affect the confidentiality, integrity and...

ROS-20260113-7349

A vulnerability in the ltdcplanecreate function in the drivers/gpu/drm/stm/ltdc.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

Mozilla Firefox和Mozilla Firefox ESR安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation.Mozilla Firefox ESR is an extended support version of Firefox web browser from the Mozilla Foundation.Mozilla Thunderbird is a suite of e-mail client software from the Mozilla Foundation that is separate from the Mozilla...