11607 matches found
PT-2025-25807
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0 Description A vulnerability has been resolved in the Linux kernel. The issue was reported by Guoyu Yin, who found a splat in the ipmr netns cleanup path. The vulnerability is related to the ipmr can free...
CVE-2025-38032: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mr: consolidate the ipmrcanfreetable checks. Guoyu Yin reported a splat in the ipmr netns cleanup path: WARNING: CPU: 2 PID: 14564 at net/ipv4/ipmr.c:440 ipmrfreetable net/ipv4/ipmr.c:440 inline WARNING: CPU: 2 PID: 14564 at...
PT-2025-25799
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free read bug has been identified in the RDMA/rxe component of the Linux kernel, specifically in the rxe queue cleanup function. This issue arises when rxe cq from init...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a read after release during queue cleanup, which could lead to memory corruption...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak caused by cifs not cleaning up the cifsdeferredclose structure when canceling a deferred close...
CVE-2025-49157
A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
CVE-2025-49157
A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
CVE-2025-49157: Improper Privilege Management
A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...
Trend Micro Apex One Damage Cleanup Engine security vulnerability
Trend Micro Apex One Damage Cleanup Engine is a malware scanning engine from Trend Micro. A security vulnerability exists in Trend Micro Apex One Damage Cleanup Engine, which stems from a link following issue that could lead to local elevation of privilege...
Intermesh BV Group Office Cross-site Scripting Vulnerability
Intermesh BV Group Office is an enterprise CRM and groupware tool from Intermesh BV open source. A cross-site scripting vulnerability exists in Intermesh BV Group Office versions prior to 6.8.123 and prior to 25.0.27, which stems from insufficient input cleanup and could lead to a reflective...
WordPress plugin Wise Chat has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Elementor Website Builder Pro plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Elementor Website Builder Pro plugin that stems from insufficient input cleanup and output escaping of the buttontex...
Mezzanine cross-site scripting vulnerabilities
mezzanine is a Django CMS framework by stephenmcd individual developers. A cross-site scripting vulnerability exists in mezzanine versions prior to 6.1.1, which stems from insufficient cleanup of the displayablelinksjs function and could lead to a stored cross-site scripting attack...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Proper folio cleanup should be performed when rundelallocnocow fails. BUG With CONFIGDEBUGVM set, test case generic/476 may crash due to the following VMBUGONFOLIO issues: - BTRFS error device dm-3: cowfilerange failed;...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: HID: hid-steam – Fixed a use-after-free issue when removing a device. When a hid-steam device is removed, it must clean up the clienthdev that was used to intercept hidraw access. This can result in deferred tasks being scheduled...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: dmaengine: idxd: The call with idxdcleanup helper has been removed from the refactoring process. The idxdcleanup helper is responsible for cleaning up operations related to perfmon, interrupts, internals, etc. Removing this ca...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: octeonep: Fixed the issue where the host would hang during device reboot. When the host loses heartbeat messages from the device, the driver calls the device-specific ndostop function, which frees the resources. If the driver is...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fixed the WARNON!ctx message in freeevent for partial initialization. The call to getctxchildctx and the assignment of childevent-ctx are now performed immediately after the childevent is allocated. Ensure that...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: iommu: Cleansing iommu-dma operations during cleanup. If iommudeviceregister encounters an error, it may end up tearing down already-configured groups and default domains. However, this still leaves devices connected to iommu-dma...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Block: Fixed resource leak in the blkmqsysfsregister error path. When registration of a queue fails after blkmqsysfsregister is successful, but the function later encounters an error, we need to clean up the blkmqsysfs resources...