CVE-2025-71134

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: change all pageblocks migrate type on coalescing When a page is freed it coalesces with a buddy into a higher order page while possible. When the buddy page migrate type differs, it is expected to be updated to matc...

ROS-20260114-7302

A vulnerability in the rfcommsockalloc function of the net/bluetooth/rfcomm/sock.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...

PT-2026-2957

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.30 through 2.42 Description Providing an excessively large alignment value to the memalign family of functions – including memalign, posix memalign, aligned alloc, valloc, and pvalloc – within the GNU C Library can lea...

UBUNTU-CVE-2025-68787

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nrsendmsg syzbot reported a memory leak 1. When function sockallocsendskb return NULL in nroutput, the original skb is not freed, which was allocated in nrsendmsg. Fix this by freeing it before return. ...

CVE-2025-68787 netrom: Fix memory leak in nr_sendmsg()

In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nrsendmsg syzbot reported a memory leak 1. When function sockallocsendskb return NULL in nroutput, the original skb is not freed, which was allocated in nrsendmsg. Fix this by freeing it before return. ...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: net/smc: fixed a warning in smcrxsplice, when calling getpage. smcloregisterdmb allocates DMB buffers using kzalloc, which are later passed to getpage in smcrxsplice. Since kmalloc memory is not page-backed, this triggers...

OESA-2026-1010 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 "iwcm: free cmid resources on the last deref" simplified cmid resour...

CVE-2023-45510

tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch operator new vs operator delete error...

Siemens Ruggedcom ROX Use After Free (CVE-2021-47361)

In the Linux kernel, the following vulnerability has been resolved: mcb: fix error handling in mcballocbus There are two bugs: 1 If idasimpleget fails then this code calls putdevicecarrier but we haven't yet called getdevicecarrier and probably that leads to a use after free. 2 After...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000282 advisory. drivers/scsi/qla2xxx/qlaos.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. Tenable has extracted...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000363 advisory. drivers/gpu/drm/radeon/radeondisplay.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. NOTE: A...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000387)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000387 advisory. A memory leak in the mwifiexpciealloccmdrspbuf function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allows attackers to cause a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000525)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000525 advisory. A memory leak in the allocsgtable function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000520)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000520 advisory. drivers/gpu/drm/radeon/radeondisplay.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. NOTE: A...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000378 advisory. An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasascreateframepool fails in megasasalloccmds in...

irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()

...

Linux Distros Unpatched Vulnerability : CVE-2023-54231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: libwx: fix memory leak in wxsetuprxresources When wxallocpagepool failed in wxsetuprxresources, it doesn't release DMA buffer. Add dmafreecoherent in the...

PT-2026-6138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel driver for spi-sprd-adi contains a flaw where a double-free of the spi controller structure can occur. This happens when devm register restart handler fails, causing the...

SUSE CVE-2022-50810

In the Linux kernel, the following vulnerability has been resolved: rapidio: devices: fix missing putdevice in mportcdevopen When kfifoalloc fails, the refcount of chdev-dev is left incremental. We should use putdevice&chdev-dev to decrease the ref count of chdev-dev to avoid refcount leak...

SUSE CVE-2023-54298

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: quarkdts: fix error pointer dereference If allocsocdts fails, then we can just return. Trying to free "socdts" will lead to an Oops...