Apple Security Advisory 05-12-2025-3

Apple Security Advisory 05-12-2025-3 - macOS Sequoia 15.5 addresses bypass, code execution, double free, information leakage, integer overflow, out of bounds read, and use-after-free vulnerabilities...

Apple Security Advisory 05-12-2025-4

Apple Security Advisory 05-12-2025-4 - macOS Sonoma 14.7.6 addresses bypass, code execution, double free, information leakage, integer overflow, out of bounds read, and use-after-free vulnerabilities...

Apple Security Advisory 05-12-2025-1

Apple Security Advisory 05-12-2025-1 - iOS 18.5 and iPadOS 18.5 addresses code execution, double free, integer overflow, out of bounds read, spoofing, and use-after-free vulnerabilities...

Apple Security Advisory 05-12-2025-7

Apple Security Advisory 05-12-2025-7 - tvOS 18.5 addresses code execution, double free, integer overflow, out of bounds read, and use-after-free vulnerabilities...

PT-2025-25853

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free error in the Linux kernel's crypto subsystem has been resolved. The issue occurs when the accept2 function is called on a socket of type algif hash with the MSG MORE flag s...

Apple Security Advisory 05-12-2025-5

Apple Security Advisory 05-12-2025-5 - macOS Ventura 13.7.6 addresses bypass, code execution, double free, information leakage, integer overflow, out of bounds read, and use-after-free vulnerabilities...

Apple Security Advisory 05-12-2025-6

Apple Security Advisory 05-12-2025-6 - watchOS 11.5 addresses code execution, double free, integer overflow, out of bounds read, and use-after-free vulnerabilities...

Apple Security Advisory 05-12-2025-8

Apple Security Advisory 05-12-2025-8 - visionOS 2.5 addresses code execution, double free, integer overflow, out of bounds read, and use-after-free vulnerabilities...

Apple Security Advisory 05-12-2025-2

Apple Security Advisory 05-12-2025-2 - iPadOS 17.7.7 addresses code execution, double free, information leakage, integer overflow, out of bounds read, spoofing, and use-after-free vulnerabilities...

SUSE CVE-2025-37890

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report 1, we have a UAF case when an hfsc class has a netem child qdisc. The crux of the issue is that hfsc is assuming that...

UBUNTU-CVE-2025-37890

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report 1, we have a UAF case when an hfsc class has a netem child qdisc. The crux of the issue is that hfsc is assuming that...

VulnCheck KEV: CVE-2018-0160

A vulnerability in Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper management of memory resources, referred to as a double free. An...

SUSE CVE-2025-4574

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

CVE-2025-31235

A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to cause unexpected system termination...

CVE-2025-31241

A double free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remote attacker may cause an unexpected app termination...

kernel: pwm: Fix double shift bug

REJECTED CVE A double shift vulnerability was identified in the Linux kernel's pwm subsystem. The issue involves passing a shifted value instead of a bit number to set/testbit functions, resulting in a double shift e.g., BITBIT1. While this doesn't cause problems for values 0 or 1, values of 5 or...

GHSA-W443-5H3J-JQCP Duplicate Advisory: crossbeam-channel Vulnerable to Double Free on Drop

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pg9f-39pc-qf8g. This link is maintained to preserve external references. Original Description In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some...

Duplicate Advisory: crossbeam-channel Vulnerable to Double Free on Drop

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pg9f-39pc-qf8g. This link is maintained to preserve external references. Original Description In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some...

Alibaba Cloud Linux 3 : 0079: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2023:0079)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0079 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-33061: Insufficient control flow...

AZL-61839 CVE-2025-4574 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...