CVE-2022-2078

CVE-2022-2078 $ ./poc ... + getset leakbuffer: 0000 30 31 32 33 34 35 36 37 38 39 3a 3b 3c 3d 3e 3f 0123456789:;? 0010 28 00 00 00 00 02 0a 8f 68 8b a2 be 40 ac 70 8c [email protected]. 0020 ff ff ff ff 00 6c b5 81 .....l.. + kernel=0xffffffff8c70ac40...

EUVD-2026-108842

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached...

CVE-2026-99047

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached...

CVE-2026-99047

The Linux kernel contains a vulnerability in the GVE component where XSK buffers are leaked when resetting ring states during queue stops. The root cause is that GVE fails to free buffers attached to an allocated buf_state when stopping rings, causing all posted buffers to be leaked. This issue w...

CVE-2026-99046

The Linux kernel contains a memory leak vulnerability in the gve component related to AF_XDP ZC . When the error bit is set in the RX completion descriptor , the buf_state and its attached buffer are not properly freed, resulting in an XSK buffer leak . This issue has been resolved in recent kern...

CVE-2026-99046

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the bufstate and its attached buffer should be freed. In the case of AFXDP ZC, the XSK buffer was not freed, leading to a lea...

EUVD-2026-108841

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the bufstate and its attached buffer should be freed. In the case of AFXDP ZC, the XSK buffer was not freed, leading to a lea...

CVE-2026-77684

The Bluetooth Classic Hands-Free Profile (HFP) HF role in Zephyr RTOS (subsys/bluetooth/host/classic/hfp_hf.c) contains a memory leak where AT command buffers are not released when the RFCOMM DLC goes down. This causes a permanent leak from the fixed hf_pool . If the pool is exhausted, subsequent...

CVE-2026-77684 Bluetooth Classic HFP Hands-Free: TX buffer leak on RFCOMM disconnect leads to permanent Bluetooth denial of service

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfphf.c does not release the AT command buffers that are still queued on hf-txpending when the RFCOMM DLC goes down. hfphfdisconnected only cancelled the work items and cleared hf-acl, and no other code path ever...

CVE-2026-77684 Bluetooth Classic HFP Hands-Free: TX buffer leak on RFCOMM disconnect leads to permanent Bluetooth denial of service

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfphf.c does not release the AT command buffers that are still queued on hf-txpending when the RFCOMM DLC goes down. hfphfdisconnected only cancelled the work items and cleared hf-acl, and no other code path ever...

PT-2026-117696

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description An issue exists in the Bluetooth Classic Hands-Free Profile HFP HF role within subsys/bluetooth/host/classic/hfp hf.c. The system fails to release AT command buffers queued on hf-tx pending wh...

CVE-2026-98486

In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failure enadeviceinit initializes the MMIO read mechanism with enacommmioregreadrequestinit, which allocates a coherent DMA buffer for MMIO read responses. The normal removal path...

CVE-2026-98486

The Linux kernel contains a memory leak vulnerability within the ena network driver. The ena_device_init() function allocates a coherent DMA buffer for MMIO read responses via ena_com_mmio_reg_read_request_init(). However, if ena_probe() fails after initialization succeeds, the error path fails t...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: enetc: avoid buffer leaks on xdpdoredirect failure Before enetccleanrxringxdp calls xdpdoredirect, each software BD in the RX ring between index origi and i can have one of two refcount values on its page. We are the owner o...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ceph: A buffer leak in cephsetxattr has been fixed. In the cephsetxattr function, the oldblob can store the ci-ixattrs.preallocblob value during a retry. However, the cephbufferput method is never called for the oldblob object...

GSS Buffer Leak

pgjdbc the PostgreSQL JDBC Driver is vulnerable to GSS buffer leak. The vulnerability is due to the driver reusing the GSS send buffer when GSS encryption is enabled, where writes from a byte array using methods such as setString, setBytes, ByteStreamWriter, CopyIn.writeToCopy, or LargeObject.wri...

SUSE CVE-2026-98354

In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer leak when PKey enforcement fails ibmadcompleterecv initializes madrecvwc-rmpplist and then runs ibmadenforcesecurity before linking recvbuf onto that list. On failure it calls ibfreerecvmad, which onl...

DEBIAN-CVE-2026-98354

In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer leak when PKey enforcement fails ibmadcompleterecv initializes madrecvwc-rmpplist and then runs ibmadenforcesecurity before linking recvbuf onto that list. On failure it calls ibfreerecvmad, which onl...

AZL-106290 CVE-2026-98354 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer leak when PKey enforcement fails ibmadcompleterecv initializes madrecvwc-rmpplist and then runs ibmadenforcesecurity before linking recvbuf onto that list. On failure it calls ibfreerecvmad, which onl...

UBUNTU-CVE-2026-98354

In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer leak when PKey enforcement fails ibmadcompleterecv initializes madrecvwc-rmpplist and then runs ibmadenforcesecurity before linking recvbuf onto that list. On failure it calls ibfreerecvmad, which onl...