14125 matches found
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989064)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989064 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix double free in siparsepowertable In function siparsepowertable, array...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989275)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989275 advisory. In the Linux kernel, the following vulnerability has been resolved: selinux: fix double free of condlist on error paths On error path from condreadlist and...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988837)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988837 advisory. In the Linux kernel, the following vulnerability has been resolved: ubifs: renamewhiteout: Fix double free for whiteoutui-data 'whiteoutui-data' will be freed twice ...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988780)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988780 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifsgetroot When cifsgetroot fails during...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990102)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990102 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix double free in siparsepowertable In function siparsepowertable, array...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989190)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989190 advisory. In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix double free issue on err path fix error path handling in...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989684)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989684 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: elan: Fix potential double free in elaninputconfigured 'input' is a managed resource allocat...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988876)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988876 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential double free in createvarref In createvarref, initvarref is called to...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989404)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989404 advisory. In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989051)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989051 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential bit17 double-free A userspace with multiple threads racing I915GEMSETTILI...
Security Bulletin: IBM Edge Data Collector uses crossbeam-channel-0.5.14.crate which is vulnerable to CVE-2025-4574.
Summary IBM Edge Data Collector uses crossbeam-channel-0.5.14.crate which is vulnerable to CVE-2025-4574. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-4574 DESCRIPTION: In crossbeam-channel rust crate, the internal Channel type's...
CentOS 9 : kernel-5.14.0-632.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-632.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double-free when failing to DMA-map FW msg The semantics are that the caller of fbnicmbxmapmsg retains ownership of the message in case of an error. All existing callers properly free the allocated memory page...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mcdev The committed code attempted to simplify the process of deallocations, but this led to a double-free on the mcdev variable. If the MC device is a DPRC, a new mcbus is allocated, and the mcdev...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: net: libwx: removed the duplicate function pagepoolputfullpage The pagepoolputfullpage function should only be called when freeing Rx buffers or creating an skb if the size is too short. At other times, the pages need to be reuse...
Astra Linux – Vulnerability in gnutls28
A flaw was discovered in GnuTLS. There exists a double-free vulnerability in GnuTLS due to incorrect handling of ownership in the export logic of Subject Alternative Name SAN entries that contain an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1deletestructure on an...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a completion event to the host, it contains a pointer to the consumed TRE. The host uses this pointer to process all of the TREs between itself...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9375: Fixed the double-free of regulator supplies. The driver obtains regulator supplies through the devmregulatorbulkget function; therefore, regulatorbulkfree should not be called in error handling scenarios...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix double free of skb in coredump hcidevcdappend would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb. Reported-by : Dan Carpenter...