K000149538: GNU gettext vulnerability CVE-2018-18751

Security Advisory Description An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in pogramparse in po-gram-gen.y, as demonstrated by lt-msgfmt. CVE-2018-18751 Impact There is no impact; F5 products are not...

firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()

...

smb: client: fix possible double free in smb2_set_ea()

...

net: usb: lan78xx: Fix double free issue with interrupt buffer allocation

...

net: vertexcom: mse102x: Fix possible double free of TX skb

...

USN-7239-1 libmicrodns vulnerabilities

It was discovered that libmicrodns could recursively follow the same compression pointer, leading to an infinite loop. An attacker could possibly use this issue to cause a denial of service. CVE-2020-6071 It was discovered that libmicrodns did not check the return value of the rrdecode function,...

USN-7234-1: Linux kernel vulnerabilities

Ye Zhang and Nicolas Wu discovered that the iouring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

USN-7234-1 linux, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi vulnerabilities

Ye Zhang and Nicolas Wu discovered that the iouring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL, leading to a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-7234-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7234-1 advisory. Ye Zhang and Nicolas Wu discovered that the iouring subsystem in the Linux kernel did not properly handle locking for rings with IOPOLL,...

BIT-RUBY-MIN-2022-28738

A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations...

OESA-2025-1084 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg version n6.1.1 h...

OESA-2025-1083 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: FFmpeg version n6.1.1 h...

EulerOS 2.0 SP8 : kernel (EulerOS-SA-2025-1123)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : kernel: drm/sched: Avoid data corruptionsCVE-2021-47354 drm/sched: Avoid data corruptionsCVE-2024-46759 hwmon: lm95234 Fix underflows seen when...

OSV-2025-50 Heap-double-free in r_crbtree_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390503425 Crash type: Heap-double-free Crash state: rcrbtreefree rbinobjectfree rbinfilefree...

PT-2025-19369 · Git +1 · Radare2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a heap-double-free issue. The crash state involves r crbtree free, r bin object free, and r bin file free. Recommendations: At the momen...

PT-2025-4354

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a double free of TCP Server Info::hostname in the Linux kernel's smb client. When shutting down the server in cifs put tcp session, the cifsd thread might be...

CLSA-2025-1736469452 Fix of 35 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52664 - net: atlantic: eliminate double free in error handling logic CVE-url: https://ubuntu.com/security/CVE-2023-52698 - calipso: fix memory leak in netlblcalipsoaddpass CVE-url: https://ubuntu.com/security/CVE-2021-47466 - mm, slub: fix potential...

CLSA-2025-1736469006 Fix of 35 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52664 - net: atlantic: eliminate double free in error handling logic CVE-url: https://ubuntu.com/security/CVE-2023-52698 - calipso: fix memory leak in netlblcalipsoaddpass CVE-url: https://ubuntu.com/security/CVE-2021-47466 - mm, slub: fix potential...

CVE-2024-56704

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID during IRQ release. Dominique: remove confusing variable reset to 0...

AZL-55327 CVE-2024-56775 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix handling of plane refcount Why The mechanism to backup and restore plane states doesn't maintain refcount, which can cause issues if the refcount of the plane changes in between backup and restore operations,...