1474 matches found
UBUNTU-CVE-2022-49968
In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroyworkqueue call There is a possible race condition use-after-free like below FREE | USE adf7242remove | adf7242channel canceldelayedworksync | destroyworkqueue 1 | adf7242cmdrx | moddelayedwork 2 |...
CVE-2022-50216
The connected PT-2025-26142 entry describes a Linux kernel md-raid module use-after-free vulnerability triggered when md bitmap destroy occurs before thread destruction, potentially causing a kernel panic. Affected are Linux kernel versions prior to 5.19.0-rc2. Root cause: use-after-free in md-ra...
CVE-2025-38016
The CVE-2025-38016 issue concerns the Linux kernel HID-BPF path. Root cause: HID-BPF dispatch may access a cleaned SRCU after hid_bpf_destroy_device() when a device with LEDs is active and hid_ll_driver->request() is unimplemented, causing a potential use-after-free-like access to not-present ...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5: The port select structure is cleared when attempting to create it. The port select structure is cleared in case of an error, so no stale values remain after the definers are destroyed. This is because the...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: geneve: Fixed a use-after-free in genevefinddev. syzkaller reported a use-after-free in genevefinddev 0 without repro. geneveconfigure links the struct genevedev.next to netgenericnet, genevenetid-genevelist. The net here may...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: fbdev: hypervfb: Allow graceful removal of framebuffer When a Hyper-V framebuffer device is unbound, the hypervfb driver attempts to forcibly release the framebuffer. If the framebuffer is still in use, it produces a warning, and...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Wifi: ath10k: avoiding NULL pointer errors during sdio removal When running ‘rmmod ath10k’, ath10ksdioremove will free the sdioworkqueue by calling destroyworkqueue. However, if CONFIGINITONFREEDEFAULTON is set to yes, a kernel...
Vulnerabilities of the EXPORT_SYMBOL_GPL(), iscsi_session_teardown(), and iscsi_sw_tcp_sessiondestroy() functions of the Linux operating system, allowing a hacker to cause a service failure
The vulnerabilities of the EXPORTSYMBOLGPL, iscsisessionteardown, and iscsiswtcpsessiondestroy functions in the Linux operating system are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to cause a service failure...
PT-2025-27966
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference error occurs in the Linux kernel when a client sets the PreviousSessionId during the Kerberos session setup stage. This happens because sess-user is not set...
The vulnerability of the taprio_reset() and tapriodestroy() functions in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the taprioreset and tapriodestroy functions in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the `__thermal_cooling_device_register()` and `thermal_cooling_deviceDestroySysfs()` functions in the Linux operating system, allowing a hacker to trigger a service failure
The vulnerability of the thermalcoolingdeviceregister and thermalcoolingdeviceDestroySysfs functions in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2023-28399
Incorrect permission assignment for critical resource exists in CONPROSYS HMI System CHS versions prior to 3.5.3. ACL Access Control List is not appropriately set to the local folder where the affected product is installed, therefore a wide range of privileges is permitted to a user of the PC whe...
CVE-2023-23087
An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function...
SUSE CVE-2025-37905
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Balance device refcount when destroying devices Using devicefindchild to lookup the proper SCMI device to destroy causes an unbalance in device refcount, since devicefindchild calls an implicit getdevice: this,...
kernel: rpmsg: char: Avoid double destroy of default endpoint
In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Avoid double destroy of default endpoint The rpmsgdevremove in rpmsgcore is the place for releasing this default endpoint. So need to avoid destroying the default endpoint in rpmsgchrdeveptdevdestroy, this should be...
kernel: nvme-rdma: unquiesce admin_q before destroy it
In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: unquiesce adminq before destroy it Kernel will hang on destroy adminq while we create ctrl failed, such as following calltrace: PID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: "nvme" 0 ff61d23de260fb78 schedule at...
AZL-70162 CVE-2025-37884 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock between rcutaskstrace and eventmutex. Fix the following deadlock: CPU A freeevent perfkprobedestroy mutexlock&eventmutex perftraceeventunreg synchronizercutaskstrace There are several paths where freeevent grabs...
SUSE CVE-2022-49827
In the Linux kernel, the following vulnerability has been resolved: drm: Fix potential null-ptr-deref in drmvblankdestroyworker drmvblankinit call drmmaddactionorreset with drmvblankinitrelease as action. If drmmaddaction failed, will directly call drmvblankinitrelease with the vblank whose worke...
SUSE CVE-2022-49874
In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: fix possible memory leak in mousevscprobe If hidadddevice returns error, it should call hiddestroydevice to free hiddev which is allocated in hidallocatedevice...