The vulnerability of the zynqmp_dpsub_drm_cleanup() function in the drivers/gpu/drm/xlnx/zynqmp_kms.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zynqmpdpsubdrmcleanup function in the drivers/gpu/drm/xlnx/zynqmpkms.c module of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the cifs_get_tcon_super() function in the fs/smb/client/cifsproto.h module of the SMB client support library in Linux kernels allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cifsgettconsuper function in the fs/smb/client/cifsproto.h module, which is part of the SMB client support in Linux kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

pycares 资源管理错误漏洞

pycares is a python library by the individual developers at saghul. A resource management error vulnerability exists in pycares versions prior to 4.9.0, which stems from post-release reuse and may cause the interpreter to crash...

FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse

!/usr/bin/env python3 """ Exploit Title: FortiOS SSL-VPN 7.4.4 - Insufficient Session Expiration & Cookie Reuse Date: 2025-06-15 Exploit Author: Shahid Parvez Hakim BugB Technologies Vendor Homepage: https://www.fortinet.com Software Link: https://www.fortinet.com/products/secure-sd-wan/fortigate...

CVE-2025-23168

The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication 2FA using One-Time Passcodes OTP delivered via email or SMS. Versa Director accepts untrusted user input when dispatching 2FA codes, allowing an attacker who knows a valid username and password to redirect the O...

The vulnerability of the f2fs_do_shutdown() function in the fs/f2fs/file.c module of the F2FS file system support module for Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the f2fsdoshutdown function in the fs/f2fs/file.c module of the Linux file system support module is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the mpc52xx_spiRemove() function in the driver’s drivers/spi/spi-mpc52xx.c file, which supports SPI devices in the Linux kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mpc52xxspiRemove function in the driver drivers/spi/spi-mpc52xx.c code, which supports SPI devices in the Linux kernel, stems from the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the xbc_init() function in the include/linux/bootconfig.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the xbcinit function in the include/linux/bootconfig.h module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ath12k_dp_free() function in the driver drivers/net/wireless/ath/ath12k/dp.c, which is part of the Atheros/Qualcomm wireless adapter support in the Linux operating system, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath12kdpfree function in the drivers/net/wireless/ath/ath12k/dp.c file, which is part of the Atheros/Qualcomm wireless adapter support in the Linux operating system, involves re-liberating memory that has already been freed. Exploiting this vulnerability could allow an...

The vulnerability of the usb6fire_chip_abort() function in the sound/usb/6fire/chip.c module allows a hacker to trigger a service failure for USB audio devices in Linux operating systems.

The vulnerability of the usb6firechipabort function in the sound/usb/6fire/chip.c module, which supports USB audio devices in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the irqreturn_t hi3110can_ist() function in the drivers/net/can/spi/hi311x.c module of the Linux kernel allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the irqreturnt hi3110canist function in the drivers/net/can/spi/hi311x.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the sunxi_musb_exit() function in the drivers/usb/musb/sunxi.c file of the Linux kernel’s USB driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sunximusbexit function in the drivers/usb/musb/sunxi.c file of the Linux kernel’s USB driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the can_create() function in the net/can/af_can.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cancreate function in the net/can/afcan.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2025-23168

The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication 2FA using One-Time Passcodes OTP delivered via email or SMS. Versa Director accepts untrusted user input when dispatching 2FA codes, allowing an attacker who knows a valid username and password to redirect the O...

CVE-2025-23168

The CVE-2025-23168 entry describes a vulnerability in Versa Director SD-WAN’s 2FA via OTP over email/SMS. The authenticated attacker can abuse untrusted input when dispatching OTPs to redirect delivery to their device, enabling interception of codes. OTP/TOTP codes are not invalidated after use, ...

UBUNTU-CVE-2025-38067

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix segfault on registration when rseqcs is non-zero The rseqcs field is documented as being set to 0 by user-space prior to registration, however this is not currently enforced by the kernel. This can result in a segfault ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from reuse after release and could lead to a system crash...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a double release in hashaccept, which could lead to memory reuse after release...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from usbnet's use of a released linkwatch when disconnecting, which could lead to post-release reuse...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a post-release reuse issue with firmwareloader on logout...