CVE-2025-66023 NanoMQ has Use-After-Free of malformed bridging message

NanoMQ MQTT Broker NanoMQ is an all-around Edge Messaging Platform. Versions prior to 0.24.5 have a Heap-Use-After-Free UAF vulnerability within the MQTT bridge client component implemented via the underlying NanoNNG library. The vulnerability is triggered when NanoMQ acts as a bridge connecting ...

CVE-2025-66023

NanoMQ (MQTT Broker) contains a Heap-Use-After-Free (UAF) in the MQTT bridge client (via NanoNNG) triggered when acting as a bridge to a remote broker. A malicious remote broker can cause a crash or memory corruption by sending a malformed packet sequence after connection. The public notes indica...

CVE-2025-66023 NanoMQ has Use-After-Free of malformed bridging message

NanoMQ MQTT Broker NanoMQ is an all-around Edge Messaging Platform. Versions prior to 0.24.5 have a Heap-Use-After-Free UAF vulnerability within the MQTT bridge client component implemented via the underlying NanoNNG library. The vulnerability is triggered when NanoMQ acts as a bridge connecting ...

PT-2026-27746

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's bridge networking component. When the system boots with IPv6 disabled 'ipv6.disable=1', the neighbor discovery table nd tbl is not initialized...

PT-2026-27758

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the bridge component when deleting a peer MEP Maintenance Engineering Protocol. Specifically, the issue occurs because cancel delayed work sync was called on c...

PT-2026-1008

Name of the Vulnerable Software and Affected Versions NanoMQ versions prior to 0.24.5 Description NanoMQ MQTT Broker, an Edge Messaging Platform, contains a Heap-Use-After-Free UAF issue in its MQTT bridge client component, which is implemented using the NanoNNG library. This issue occurs when...

PT-2026-6119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the drm/panel-simple subsystem related to the connector type for the DataImage SCF0700C48GGU18 panel. The connector type is missing, causing dev...

NanoMQ 资源管理错误漏洞

NanoMQ is a lightweight and fast MQTT Broker for IoT edge platforms open sourced by EMQ USA. A resource management error vulnerability exists in NanoMQ versions prior to 0.24.5, which stems from the presence of heap reuse after heap release in the MQTT Bridge Client component, which could lead to...

CVE-2022-50878

In the Linux kernel, the following vulnerability has been resolved: gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611connectorinit A NULL check for bridge-encoder shows that it may be NULL, but it already been dereferenced on all paths leading to the check. 812 if !bridge-encoder...

SUSE CVE-2022-50847

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize AUX channel in it6505i2cprobe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channe...

SUSE CVE-2022-50878

In the Linux kernel, the following vulnerability has been resolved: gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611connectorinit A NULL check for bridge-encoder shows that it may be NULL, but it already been dereferenced on all paths leading to the check. 812 if !bridge-encoder...

Linux Distros Unpatched Vulnerability : CVE-2022-50878

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611connectorinit A NULL check for bridge-encoder shows that it may be NULL, but it already been...

Linux Distros Unpatched Vulnerability : CVE-2022-50847

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/bridge: it6505: Initialize AUX channel in it6505i2cprobe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992713)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992713 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/bridge: megachips: Fix a null pointer dereference bug When removing the module we will get th...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993027 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: SGI-IP27: Fix platform-device leak in bridgeplatformcreate In error case in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992881 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pciregisterhostbridge If deviceregister fails, call putdevice to give ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992808)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992808 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pcibuslock One of the true positives that the cfgaccesslock...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993221)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993221 advisory. In the Linux kernel, the following vulnerability has been resolved: bridge: switchdev: Fix memory leaks when changing VLAN protocol The bridge driver can offload VLA...

EUVD-2022-55851

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: it6505: Initialize AUX channel in it6505i2cprobe During device boot, the HPD interrupt could be triggered before the DRM subsystem registers it6505 as a DRM bridge. In such cases, the driver tries to access AUX channe...

CVE-2022-50878

In the Linux kernel, the following vulnerability has been resolved: gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611connectorinit A NULL check for bridge-encoder shows that it may be NULL, but it already been dereferenced on all paths leading to the check. 812 if !bridge-encoder...