966 matches found
GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption
...
net: libwx: handle page_pool_dev_alloc_pages error
...
SUSE CVE-2025-38263
In the Linux kernel, the following vulnerability has been resolved: bcache: fix NULL pointer in cachesetflush 1. LINE1794 - LINE1887 is some codes about function of bchcachesetalloc. 2. LINE2078 - LINE2142 is some codes about function of registercacheset. 3. registercacheset will call...
DEBIAN-CVE-2025-38274
In the Linux kernel, the following vulnerability has been resolved: fpga: fix potential null pointer deref in fpgamgrtestimgloadsgt fpgamgrtestimgloadsgt allocates memory for sgt using kunitkzalloc however it does not check if the allocation failed. It then passes sgt to sgalloctable, which passe...
kernel: ipv6: mcast: extend RCU protection in igmp6_send()
In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6send igmp6send can be called without RTNL or RCU being held. Extend RCU protection so that we can safely fetch the net pointer and avoid a potential UAF. Note that we no longer can use...
PT-2025-30877
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the TCP implementation related to the calculation of remaining space in socket buffers skb. Specifically, an incorrect signedness check during the...
The vulnerability of the alloc_preauth_hash() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the allocpreauthhash function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2025-30866
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue was identified and resolved in the rtsn probe function within the networking subsystem of the Linux kernel. The fix involves adding a check for the retur...
AZL-64320 CVE-2025-6498 affecting package tidy 5.8.0-6
A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/alloc.c. The manipulation leads to memory leak. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be...
The vulnerability of the nvmet_alloc_ctrl() function in the drivers/nvme/target/core.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the nvmetallocctrl function in the drivers/nvme/target/core.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PT-2025-33560
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.16.0-rc2 Description: The Linux kernel contained a flaw in the alloc tag top users function within the lib/alloc tag component. This function attempted to acquire a semaphore lock alloc tag cttype-mod lock eve...
SUSE CVE-2025-38018
In the Linux kernel, the following vulnerability has been resolved: net/tls: fix kernel panic when allocpage failed We cannot set fraglist to NULL pointer when allocpage failed. It will be used in tlsstrpcheckqueueok when the next time tlsstrpreadsock is called. This is because we don't reset...
CVE-2022-49988
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
AZL-70214 CVE-2022-49961 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: bpf: Do markchainprecision for ARGCONSTALLOCSIZEORZERO Precision markers need to be propagated whenever we have an ARGCONST style argument, as the verifier cannot consider imprecise scalars to be equivalent for the purposes of...
UBUNTU-CVE-2022-50143
In the Linux kernel, the following vulnerability has been resolved: intelth: Fix a resource leak in an error handling path If an error occurs after calling 'pciallocirqvectors', 'pcifreeirqvectors' must be called as already done in the remove function...
CVE-2022-49988
Mode C: The connected PT-2025-25914 entry documents a Linux kernel vulnerability in the binder_alloc path related to missing mmap read lock calls when using the VMA. Specifically, mmap_read_lock() is not taken in binder_alloc_print_pages() and during checks in binder_alloc_new_buf_locked(), with ...
CVE-2022-49947
CVE-2022-49947: Linux kernel binder null-ptr dereference in alloc->vma_vm_mm. Connected reports confirm a fix: initialize alloc->vma_vm_mm during open() and cache from current->mm to guarantee safe mmap_lock usage when a binder_proc has not mmap’d to set up alloc space. Descriptions deta...
CVE-2022-49947 binder: fix alloc->vma_vm_mm null-ptr dereference
In the Linux kernel, the following vulnerability has been resolved: binder: fix alloc-vmavmmm null-ptr dereference Syzbot reported a couple issues introduced by commit 44e602b4e52f "binderalloc: add missing mmaplock calls when using the VMA", in which we attempt to acquire the mmaplock when...
DEBIAN-CVE-2025-38018
In the Linux kernel, the following vulnerability has been resolved: net/tls: fix kernel panic when allocpage failed We cannot set fraglist to NULL pointer when allocpage failed. It will be used in tlsstrpcheckqueueok when the next time tlsstrpreadsock is called. This is because we don't reset...