11 matches found
PT-2026-64597
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the firmware loader. In the firmware upload register function, if alloc lookup fw priv fails after fw create instance has successfully executed, the system cal...
CVE-2026-46283
In the Linux kernel, the following vulnerability has been resolved: tpm: Use kfreesensitive to free auth session in tpmdevrelease tpmdevrelease uses plain kfree to free chip-auth, which contains sensitive cryptographic material including HMAC session keys, nonces, and passphrase data struct...
PT-2026-47355
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The tpm dev release function uses kfree instead of kfree sensitive to free chip-auth. This structure contains sensitive cryptographic material, including HMAC session keys, nonces, and...
SUSE CVE-2026-31759
In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpiregisterinterface error path When deviceregister fails, ulpiregister calls putdevice on ulpi-dev. The device release callback ulpidevrelease drops the OF node reference and frees ulpi, but the...
CVE-2026-31759
CVE-2026-31759 affects the Linux kernel USB ULPI path (usb: ulpi) where a double free could occur in ulpi_register_interface() after a failed device_register(), because the error path freed ulpi twice. The root cause is a missing delegation of cleanup to put_device() via ulpi_dev_release(), preve...
The vulnerability of the fw_dev_release() function in the drivers/base/firmware_loader/sysfs.c module of the Linux kernel’s device drivers allows a hacker to trigger a service failure.
The vulnerability of the fwdevrelease function in the drivers/base/firmwareloader/sysfs.c file of the Linux kernel’s device drivers relates to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
kernel: can: peak_pci: peak_pci_remove(): fix UAF
In the Linux kernel, the following vulnerability has been resolved: can: peakpci: peakpciremove: fix UAF When remove the module peekpci, referencing 'chan' again after releasing 'dev' will cause UAF. Fix this by releasing 'dev' later. The following log reveals it: 35.961814 BUG: KASAN:...
DEBIAN-CVE-2024-26935
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix unremoved procfs host directory regression Commit fc663711b944 "scsi: core: Remove the /proc/scsi/$procname directory earlier" fixed a bug related to modules loading/unloading, by adding a call to scsiprochostdirr...
PT-2024-3468
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a possible double free in the error handling path of the net: pds core module. When auxiliary device add returns an error and then calls auxiliary device uninit,...
PT-2025-40225
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the devfreq dev release function within the devfreq module of the Linux kernel. The issue stems from resources allocated by srcu init notifier head not being...