CVE-2025-39705

The CVE-2025-39705 entry concerns a NULL pointer dereference in the AMD display driver (DC module) for the Linux kernel. Root cause: during cleanup in dc_destruct(), if dc->ctx construction failed, dc->ctx is NULL but code dereferenced dc->ctx->perf_trace. The fix added a NULL check f...

CVE-2025-39674 scsi: ufs: ufs-qcom: Fix ESI null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provides dedicated interrupts per MCQ hardware queue. This is optional feature and UFS MCQ should work with and without ESI...

CVE-2025-38700 scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsiconn-dddata only if memory is allocated In case of an ibfastregmr allocation failure during iSER setup, the machine hits a panic because iscsiconn-dddata is initialized unconditionally, even when n...

Grub2: commands/extcmd: missing check for failed allocation

...

CVE-2025-57611

An issue was discovered in rust-ffmpeg 0.3.0 after comit 5ac0527 Null pointer dereference vulnerability in the dump method allows an attacker to cause a denial of service. The vulnerability exists because the method fails to check the return value of avfiltergraphdump for NULL, leading to a crash...

f2fs: fix to avoid panic once fallocation fails for pinfile

...

Linux Distros Unpatched Vulnerability : CVE-2019-7582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory...

Linux Distros Unpatched Vulnerability : CVE-2019-7581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The parseSWFACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that...

PT-2025-44128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The TRBE driver in the Linux kernel does not properly handle allocation failures. When buffer allocation fails, the driver returns an error code, but the calling function only checks for...

drm/amd/display: Handle dml allocation failure to avoid crash

...

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.

...

The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted text chunk in a PNG image file, which triggers a memory allocation failure that is not properly handled, leading to a heap-based buffer overflow.

...

drm/amd/display: Deallocate DML memory if allocation fails

...

PT-2025-38554

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the pad compress skb function within the PPP Point-to-Point Protocol component of the Linux kernel. If the alloc skb function fails during the compression process...

CVE-2025-57611

An issue was discovered in rust-ffmpeg 0.3.0 after comit 5ac0527 Null pointer dereference vulnerability in the dump method allows an attacker to cause a denial of service. The vulnerability exists because the method fails to check the return value of avfiltergraphdump for NULL, leading to a crash...

PT-2025-35575

Name of the Vulnerable Software and Affected Versions: rust-ffmpeg versions 0.3.0 and later after commit 5ac0527 Description: A null pointer dereference issue exists in the dump function of rust-ffmpeg. The function does not validate the return value of avfilter graph dump for NULL, which can lea...

CVE-2025-57611

An issue was discovered in rust-ffmpeg 0.3.0 after comit 5ac0527 Null pointer dereference vulnerability in the dump method allows an attacker to cause a denial of service. The vulnerability exists because the method fails to check the return value of avfiltergraphdump for NULL, leading to a crash...

MGASA-2025-0220 Updated glibc packages fix vulnerability

Double-free after allocation failure in regcomp. CVE-2025-8058...

Updated glibc packages fix vulnerability

Double-free after allocation failure in regcomp. CVE-2025-8058...

Linux Distros Unpatched Vulnerability : CVE-2019-14877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the mdiff function of the newlib libc library, all versions prior to 3.3.0 see newlib/libc/stdlib/mprec.c, Balloc is used to allocate big integers, however n...