CVE-2025-37849 KVM: arm64: Tear down vGIC on failed vCPU creation

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvmarchvcpucreate fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU data initialised. Note only does this leak...

CVE-2025-37847

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in ivpumscleanup Fix deadlock in ivpumscleanup by preventing runtime resume after filepriv-mslock is acquired. During a failure in runtime resume, a cold boot is executed, which calls ivpumscleanupall. Th...

CVE-2025-37842

CVE-2025-37842 affects the Linux kernel and is resolved by upgrading to kernel versions >= 6.6.112.1-2 (as noted by Mariner/Astra/SUSE advisories). Technical details from connected docs indicate the issue arises in the spi/fsl-qspi driver cleanup path: the driver previously used a legacy remov...

CVE-2025-37842 spi: fsl-qspi: use devm function instead of driver remove

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-qspi: use devm function instead of driver remove Driver use devm APIs to manage clk/irq/resources and register the spi controller, but the legacy remove function will be called first during device detach and trigger kern...

CVE-2025-37842 spi: fsl-qspi: use devm function instead of driver remove

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-qspi: use devm function instead of driver remove Driver use devm APIs to manage clk/irq/resources and register the spi controller, but the legacy remove function will be called first during device detach and trigger kern...

SUSE CVE-2022-49793

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit devsetname allocates memory for name, it need be freed when deviceadd fails, call putdevice to give up the reference that hold in deviceinitialize, so that it can ...

SUSE CVE-2022-49836

In the Linux kernel, the following vulnerability has been resolved: siox: fix possible memory leak in sioxdeviceadd If deviceregister returns error in sioxdeviceadd, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give up the reference...

SUSE CVE-2022-49926

In the Linux kernel, the following vulnerability has been resolved: net: dsa: Fix possible memory leaks in dsaloopinit kmemleak reported memory leaks in dsaloopinit: kmemleak: 12 new suspected memory leaks unreferenced object 0xffff8880138ce000 size 2048: comm "modprobe", pid 390, jiffies...

Gen Digital Avast Cleanup Premium security vulnerabilities

Gen Digital Avast Cleanup Premium is an advanced PC cleanup and optimization tool from Gen Digital, Inc. with deep junk cleaning and automated maintenance features. A security vulnerability exists in Gen Digital Avast Cleanup Premium version 24.2.16593.17810, which stems from a mishandling of...

CVE-2024-13961: Improper Link Resolution Before File Access

Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU...

CVE-2025-37877: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu: Clear iommu-dma ops on cleanup If iommudeviceregister encounters an error, it can end up tearing down already-configured groups and default domains, however this currently still leaves devices hooked up to iommu-dma and ev...

Gen Digital Avast Cleanup Premium security vulnerabilities

Gen Digital Avast Cleanup Premium is an advanced PC cleanup and optimization tool from Gen Digital, Inc. with deep junk cleaning and automated maintenance features. A security vulnerability exists in Gen Digital Avast Cleanup Premium version 24.2.16593.17810, which stems from a mishandling of...

CVE-2024-13962: Improper Link Resolution Before File Access

Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Gen Digital Inc. Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveragi...

PT-2025-20565

Name of the Vulnerable Software and Affected Versions Avast Cleanup Premium version 24.2.16593.17810 Description The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a time-of-check to time-of-use...

PT-2025-20564 · Avast · Avast Cleanup Premium

Name of the Vulnerable Software and Affected Versions: Avast Cleanup Premium version 24.2.16593.17810 Description: The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a time-of-check to time-of-use...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to clear the dmaiommu flag during iommu cleanup, which could lead to abnormal subsequent operation...

BIG-IP FSM Component DoS

The vulnerability of the fsm component in BIG-IP Next Service Proxy for Kubernetes SPK, as well as in tools for access control and remote authentication, is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

btrfs cleanupTransaction Heap Buffer Overflow DoS

The vulnerability of the cleanupTransaction function in the fs/btrfs/transaction.c module of the btrfs file system support in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Resource Leak DoS

The vulnerability of the Linux operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from file locks not being handled correctly in the ivpumscleanup function, which could lead to a deadlock...