PT-2026-39106

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the e1000 and e1000e drivers during DMA Direct Memory Access error cleanup. When an error occurs while mapping TX buffers, the driver fails to correctly unmap all...

CVE-2026-43192

In the Linux kernel, the following vulnerability has been resolved: dm mpath: Add missing dmputdevice when failing to get scsi dh name When commit fd81bc5cca8f "scsi: devicehandler: Return error pointer in scsidhattachedhandlername" added code to fail parsing the path if scsidhattachedhandlername...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38225)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38225 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Cleanup after an...

CVE-2025-68791

A reference count leak flaw was found in the Linux kernel's FUSE filesystem when using iouring for argument copies. The copyfinish function is not called in error paths, causing page reference counts to leak. This can lead to memory being pinned indefinitely and potential resource exhaustion...

CVE-2025-68791

In the Linux kernel, the following vulnerability has been resolved: fuse: missing copyfinish in fuse-over-io-uring argument copies Fix a possible reference count leak of payload pages during fuse argument copies. Joanne: simplified error cleanup...

UBUNTU-CVE-2025-68791

In the Linux kernel, the following vulnerability has been resolved: fuse: missing copyfinish in fuse-over-io-uring argument copies Fix a possible reference count leak of payload pages during fuse argument copies. Joanne: simplified error cleanup...

CVE-2025-68791 fuse: missing copy_finish in fuse-over-io-uring argument copies

In the Linux kernel, the following vulnerability has been resolved: fuse: missing copyfinish in fuse-over-io-uring argument copies Fix a possible reference count leak of payload pages during fuse argument copies. Joanne: simplified error cleanup...

CVE-2025-62408 c-ares has a Use After Free vulnerability when connection is cleaned up after error

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using readanswer and processanswer, which can cause a Denial of Service. This issue is fixed in version 1.34.6...

CVE-2025-62408

CVE-2025-62408 affects the c-ares asynchronous DNS resolver. Versions 1.32.3–1.34.5 terminate a query after maximum attempts when read_answer() or process_answer() are used, causing a Denial of Service. The issue is fixed in version 1.34.6. Remediation: upgrade to 1.34.6 (or later).

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989276)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989276 advisory. In the Linux kernel, the following vulnerability has been resolved: watchqueue: Fix NULL dereference in error cleanup In watchqueuesetsize, the error cleanup code...

EUVD-2025-36983

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: frndis: Refactor bind path to use free After an bind/unbind cycle, the rndis-notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987600)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987600 advisory. In the Linux kernel, the following vulnerability has been resolved: watchqueue: Fix NULL dereference in error cleanup In watchqueuesetsize, the error cleanup code...

PT-2026-2523

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to fuse argument copies when using fuse-over-io-uring. Specifically, a missing copy finish function can lead to a reference count leak of payloa...

EUVD-2023-59716

Malicious code in bioql PyPI...

CVE-2025-39852

In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 When tcpaocopyallmatching fails in tcpv6synrecvsock it just exits the function. This ends up causing a memory-leak: unreferenced object 0xffff0000281a8200 size...

UBUNTU-CVE-2025-39837

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: Fix racy registrations asuswmiregisterdriver may be called from multiple drivers concurrently, which can lead to the racy list operations, eventually corrupting the memory and hitting Oops on some ASUS...

CVE-2022-50357

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: fix some leaks in probe The dwc3getproperties function calls: dwc-usbpsy = powersupplygetbynameusbpsyname; so there is some additional clean up required on these error paths...

PT-2025-37600

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.0-rc3-next-20220830 380 Description: The Linux kernel contains a flaw in the slimbus qcom-ngd subsystem. Insufficient error handling during probe deferral can lead to warnings related to already registered...

Linux Distros Unpatched Vulnerability : CVE-2024-35914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix error cleanup path in nfsdrename Commit a8b0026847b8 rename: avoid a deadlock in t...

DEBIAN-CVE-2025-38416

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty-discdata only in success path Setting tty-discdata before opening the NCI device means we need to clean it up on error paths. This also opens some short window if device starts sending data, even before...