Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper use of the GFP flag for fillpool in debugobjects, which could lead to a deadlock...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the fact that exfat's use of kmallocarray may result in a memory allocation failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper memory allocation and could lead to a memory leak...

Linux Distros Unpatched Vulnerability : CVE-2023-54260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: Fix lost destroy smbd connection when MR allocate failed If the MR allocate failed, the smb direct connection info is NULL, then smbddestroy will directly...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992604 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: net: qlcnic: Fix potential memory leak in qlcnicsriovinit If vp alloc failed in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992217)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992217 advisory. In the Linux kernel, the following vulnerability has been resolved: integrity: Fix memory leakage in keyring allocation error path Key restriction is allocated in...

PT-2025-54089

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's CIFS implementation where a Server Message Block SMB direct connection's information could be leaked if memory allocation MR allocate failed...

PT-2025-53949

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel’s mac80211 component when parsing multi-BSSID elements. Specifically, element pointers could point into memory that was freed prematurel...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly destroying smbd connections when MR allocation fails in cifs, which could lead to the disclosure of...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the ofunittestfindnodebyname function failing to check the memory allocation return value, which could result in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992482 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 driver core: Add allocsiz...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992577)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992577 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible UAF when kfifoalloc fails If kfifoalloc fails in mportcdevopen, goto errfif...

PT-2025-53985

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s drm/msm/a6xx subsystem contains an issue related to memory allocation. The adreno show object function can cause a trap due to incorrect memory allocation practices...

PT-2025-54118

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak existed in the uvc gpio parse function within the uvcvideo module. The unit buffer was allocated before checking the Interrupt Request IRQ for privacy GPIO. If an error...

PT-2025-53978

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified and resolved in the Linux kernel’s AppArmor subsystem within the alloc ns function. The issue stemmed from changes introduced by commit a1bd627b46d1, which...

(0Day) FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of pixels...

CVE-2025-68356

In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function newinode returns a new inode with inode-imapping-gfpmask set to GFPHIGHUSERMOVABLE. This value includes the GFPFS flag, so allocations in that address space can recurse into...

CVE-2023-53991

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Disallow unallocated resources to be returned In the event that the topology requests resources that have not been created by the system because they are typically not represented in dpumdsscfg ^1, the resources in...

CVE-2023-54015

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Devcom, fix error flow in mlx5devcomregisterdevice In case devcom allocation is failed, mlx5 is always freeing the priv. However, this priv might have been allocated by a different thread, and freeing it might lead to...

CVE-2022-50699

In the Linux kernel, the following vulnerability has been resolved: selinux: enable use of both GFPKERNEL and GFPATOMIC in convertcontext The following warning was triggered on a hardware environment: SELinux: Converting 162 SID table entries... BUG: sleeping function called from invalid context ...