Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from inconsistent configuration when cleaning up unused classes, which could lead to a null pointer dereference...

firmware: arm_scmi: Fix double free in SMC transport cleanup path

...

sh: push-switch: Reorder cleanup operations to avoid use-after-free bug

...

drm/amd/display: Deallocate DML memory if allocation fails

...

btrfs: do proper folio cleanup when run_delalloc_nocow() failed

...

JetBrains TeamCity Data Cleanup Email Modification

The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of TeamCity in JetBrains is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability could allow a malicious actor to modify the content of email...

WordPress plugin Orbit Fox by ThemeIsle has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

kernel: tipc: Fix use-after-free in tipc_conn_close()

In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcconnclose. syzbot reported a null-ptr-deref in tipcconnclose during netns dismantle. 0 tipctopsrvstop iterates tipcnetnet-topsrv-connidr and calls tipcconnclose for each tipcconn. The problem is th...

kernel: tipc: Fix use-after-free in tipc_conn_close()

In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcconnclose. syzbot reported a null-ptr-deref in tipcconnclose during netns dismantle. 0 tipctopsrvstop iterates tipcnetnet-topsrv-connidr and calls tipcconnclose for each tipcconn. The problem is th...

WAVLINK AC1200 security vulnerability

WAVLINK AC1200 is a dual-band high power wireless router from China Ruiyin WAVLINK. A security vulnerability exists in the Wavlink AC1200 M32A3V1410230602 version and M32A3V1410240222 version releases, which stems from improper cleanup of the newpass field during a password reset, which could lea...

Linux Distros Unpatched Vulnerability : CVE-2024-0217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory...

Linux Distros Unpatched Vulnerability : CVE-2025-38628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix release of uninitialized resources on error path The commit in the fixes tag...

Linux kernel dm.c cleanup_mapped_device Buffer Overflow DoS

Vulnerability of the cleanupmappeddevice function in the drivers/md/dm.c module – The driver for supporting multiple devices such as RAID and LVM in the Linux kernel relies on the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Distros Unpatched Vulnerability : CVE-2025-38564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Handle buffer mapping fail correctly in perfmmap After successful allocation of a buffer or a successful attachment to an existing buffer perfmmap...

Linux Distros Unpatched Vulnerability : CVE-2025-38612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: fbtft: fix potential memory leak in fbtftframebufferalloc In the error paths after fbinfo structure is successfully allocated, the memory allocated in...

Linux Distros Unpatched Vulnerability : CVE-2025-38527

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: smb: client: fix use-after-free in cifsoplockbreak Ubuntu Linux - smb: client: fix use-after-free in cifsoplockbreak A race...

Linux Distros Unpatched Vulnerability : CVE-2025-38555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: usb: gadget : fix use-after-free in compositedevcleanup Ubuntu Linux - usb: gadget : fix use-after-free in compositedevcleanu...

SUSE SLES15: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2025:03023-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03023-1 advisory. The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were...

SourceForge Dogfood CRM security vulnerability

SourceForge Dogfood CRM is a SourceForge open source information management system. A security vulnerability exists in SourceForge Dogfood CRM version 2.0.10, which stems from insufficient cleanup of the data parameter in the spell.php script, which could lead to remote command execution...

Linux Distros Unpatched Vulnerability : CVE-2022-23035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative...