1539 matches found
PT-2025-33780
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the RDMA/hns subsystem where rsv qp may be double destroyed during an error condition. This occurs first in free mr init and then in hns roce exit...
DEBIAN-CVE-2025-38191
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in destroyprevioussession If client set -PreviousSessionId on kerberos session setup stage, NULL pointer dereference error will happen. Since sess-user is not set yet, It can pass the user...
CVE-2025-38191 ksmbd: fix null pointer dereference in destroy_previous_session
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in destroyprevioussession If client set -PreviousSessionId on kerberos session setup stage, NULL pointer dereference error will happen. Since sess-user is not set yet, It can pass the user...
kernel: drm/i915/vma: Fix UAF on destroy against retire race
A use-after-free flaw was found in drivers/gpu/drm/i915/i915vma.c in the Linux kernel that may lead to a crash...
PT-2025-33779
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A crash can occur when rebinding a ccp device with CONFIG CRYPTO DEV CCP DEBUGFS enabled. The crash is triggered by attempting to access a null pointer after destroying the debugfs...
The vulnerability of the __kvm_vgic_vcpudestroy() function in the kernel of the Linux operating system’s arch/arm64/kvm/vgic/vgic-init.c file allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the kvmvgicvcpuDestroy function in the kernel of the Linux operating system’s arch/arm64/kvm/vgic/vgic-init.c module is related to the re-use of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
SUSE CVE-2022-50071
In the Linux kernel, the following vulnerability has been resolved: mptcp: move subflow cleanup in mptcpdestroycommon If the mptcp socket creation fails due to a CGROUPINETSOCKCREATE eBPF program, the MPTCP protocol ends-up leaking all the subflows: the related cleanup happens in mptcpdestroysock...
CVE-2022-50216
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
DEBIAN-CVE-2022-50088
In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: fix potential memory leak in damonreclaiminit damonreclaiminit allocates a memory chunk for ctx with damonnewctx. When damonselectops fails, ctx is not released, which will lead to a memory leak. We should relea...
UBUNTU-CVE-2022-50071
In the Linux kernel, the following vulnerability has been resolved: mptcp: move subflow cleanup in mptcpdestroycommon If the mptcp socket creation fails due to a CGROUPINETSOCKCREATE eBPF program, the MPTCP protocol ends-up leaking all the subflows: the related cleanup happens in mptcpdestroysock...
UBUNTU-CVE-2022-50088
In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: fix potential memory leak in damonreclaiminit damonreclaiminit allocates a memory chunk for ctx with damonnewctx. When damonselectops fails, ctx is not released, which will lead to a memory leak. We should relea...
UBUNTU-CVE-2022-49968
In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroyworkqueue call There is a possible race condition use-after-free like below FREE | USE adf7242remove | adf7242channel canceldelayedworksync | destroyworkqueue 1 | adf7242cmdrx | moddelayedwork 2 |...
CVE-2022-50216
The connected PT-2025-26142 entry describes a Linux kernel md-raid module use-after-free vulnerability triggered when md bitmap destroy occurs before thread destruction, potentially causing a kernel panic. Affected are Linux kernel versions prior to 5.19.0-rc2. Root cause: use-after-free in md-ra...
CVE-2025-38016
The CVE-2025-38016 issue concerns the Linux kernel HID-BPF path. Root cause: HID-BPF dispatch may access a cleaned SRCU after hid_bpf_destroy_device() when a device with LEDs is active and hid_ll_driver->request() is unimplemented, causing a potential use-after-free-like access to not-present ...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: fbdev: hypervfb: Allow graceful removal of framebuffer When a Hyper-V framebuffer device is unbound, the hypervfb driver attempts to forcibly release the framebuffer. If the framebuffer is still in use, it produces a warning, and...
Vulnerabilities of the EXPORT_SYMBOL_GPL(), iscsi_session_teardown(), and iscsi_sw_tcp_sessiondestroy() functions of the Linux operating system, allowing a hacker to cause a service failure
The vulnerabilities of the EXPORTSYMBOLGPL, iscsisessionteardown, and iscsiswtcpsessiondestroy functions in the Linux operating system are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to cause a service failure...
PT-2025-27966
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference error occurs in the Linux kernel when a client sets the PreviousSessionId during the Kerberos session setup stage. This happens because sess-user is not set...
The vulnerability of the taprio_reset() and tapriodestroy() functions in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the taprioreset and tapriodestroy functions in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the `__thermal_cooling_device_register()` and `thermal_cooling_deviceDestroySysfs()` functions in the Linux operating system, allowing a hacker to trigger a service failure
The vulnerability of the thermalcoolingdeviceregister and thermalcoolingdeviceDestroySysfs functions in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...