2558 matches found
EUVD-2026-76463
In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure paramsetcharp stores charp parameters in allocated memory after slab is available, and releases the previous value when the parameter is updated. The previous value is released...
CVE-2026-89552
In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure paramsetcharp stores charp parameters in allocated memory after slab is available, and releases the previous value when the parameter is updated. The previous value is released...
CVE-2026-89552 params: fix charp corruption on allocation failure
In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure paramsetcharp stores charp parameters in allocated memory after slab is available, and releases the previous value when the parameter is updated. The previous value is released...
CVE-2026-89552 params: fix charp corruption on allocation failure
In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure paramsetcharp stores charp parameters in allocated memory after slab is available, and releases the previous value when the parameter is updated. The previous value is released...
CVE-2026-89552
This Linux kernel vulnerability affects param_set_charp() in the kernel's params subsystem. The root cause is that the previous parameter value is freed before the replacement allocation succeeds; if kmalloc_parameter() fails, the parameter is left as NULL , leading to a kernel NULL pointer deref...
PT-2026-90268
In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failure param set charp stores charp parameters in allocated memory after slab is available, and releases the previous value when the parameter is updated. The previous value is released...
CVE-2026-88050: Out-of-bounds Write
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053216)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053216 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix potential memory leak in vfiointxenable If vfioirqctxalloc failed will lead to 'nam...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053238)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053238 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmctest: Fix NULL dereference on allocation failure If the test-highmem = allocpages...
CVE-2026-80882
This vulnerability affects the Linux kernel 's Tegra crypto driver , specifically the CCM (Counter with CBC-MAC) implementation in the function tegra_ccm_do_one_req. The root cause is that when the input buffer allocation fails, the ENOMEM error value is not properly set and returned, leading to ...
SUSE CVE-2026-74359
In the Linux kernel, the following vulnerability has been resolved: configfslookup: don't leave -sdentry dangling on failure Normally -sdentry is cleared when dentry it's pointing to becomes negative on eviction, realistically. However, that only happens if dentry gets to be positive in the first...
SUSE CVE-2026-72401
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix insnauxdata leak on verifier errfreeenv path When bpfcheck allocates env-insnauxdata successfully but later fails to allocate env-succ, it jumps directly to errfreeenv. The existing vfreeenv-insnauxdata sits before the...
CVE-2026-80705
A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability arises from an insufficient check during the allocation of a 'phantom plane' within the display driver. If the allocation fails and this failure is not properly handled, it can lead to a system crash, resulting i...
SUSE CVE-2026-72171
In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list registerdevice links a new slrammtdlist entry before allocating all of the state needed by the entry. If a later allocation, memremap, or mtddeviceregister fails, the partial...
SUSE CVE-2026-72252
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: don't leak bad clone into future transaction On memory allocation failure the cloned nftpipapomatch can enter a bad state: - some fields can have their lookup tables resized while others did not - bits...
AZL-98186 CVE-2026-80616 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...
CVE-2026-80616
CVE-2026-80616 affects the Linux kernel ieee802154 subsystem. The issue occurs in cfg802154_switch_netns() , where calling WARN_ON() on -ENOMEM returned by dev_change_net_namespace() and device_rename() produces spurious kernel splats when deliberate fault injections are active. This is a low-imp...
SUSE CVE-2026-72316
In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadataopen metadataopen returns NULL when kzallocobj fails, but the caller eractr only checks ISERRmd. Since ISERRNULL returns false, the NULL pointer is treated as a valid result and lat...
CVE-2026-80616: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...
SUSE CVE-2026-72039
In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix potential memory leak in bnx2xallocmembp If the allocation of fpi.tpainfo fails, the error path will not free the struct bnx2xfastpath allocated earlier, as it is not linked to the bp structure yet. Fix that by linking...