UBUNTU-CVE-2022-50243

In the Linux kernel, the following vulnerability has been resolved: sctp: handle the error returned from sctpauthasocinitactivekey When it returns an error from sctpauthasocinitactivekey, the activekey is actually not updated. The old shkey will be freeed while it's still used as active key in...

CVE-2022-50254

The CVE-2022-50254 issue concerns the Linux kernel component for ov8865 support. The vulnerability arises from an error handling path in ov8865_probe() where new error handling could bypass existing cleanup, risking resource leaks. The connected documents indicate this was fixed in the Linux kern...

CVE-2022-50254 media: ov8865: Fix an error handling path in ov8865_probe()

In the Linux kernel, the following vulnerability has been resolved: media: ov8865: Fix an error handling path in ov8865probe The commit in Fixes also introduced some new error handling which should goto the existing error handling path. Otherwise some resources leak...

CVE-2022-50254 media: ov8865: Fix an error handling path in ov8865_probe()

In the Linux kernel, the following vulnerability has been resolved: media: ov8865: Fix an error handling path in ov8865probe The commit in Fixes also introduced some new error handling which should goto the existing error handling path. Otherwise some resources leak...

CVE-2022-50251

CVE-2022-50251 affects the Linux kernel mmc/vub300 driver. The vulnerability arises when mmc_add_host() returns an error but its return value is ignored, leading to a memory leak from mmc_alloc_host() and a potential kernel crash due to removing an unadded device in the remove path. The accompany...

CVE-2022-50243

CVE-2022-50243 – Linux kernel SCTP use-after-free (summary from connected advisories) The vulnerability arises in SCTP when an error is returned from sctp_auth_asoc_init_active_key(): the old sh_key could be freed while still in use as the active key, leading to a use-after-free during packet sen...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from mishandling of the sctpauthasocinitactivekey error, which could lead to reuse after release...

PT-2025-37682

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where the op release function is not consistently called, even when op func returns an error. This can lead to a memory leak in the layoutget codepat...

CVE-2025-59399

libocpp before 0.28.0 allows a denial of service EVerest crash because a secondary exception is thrown during error message generation...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the bridgeplatformcreate function failing to release platform device resources in an error situation, which...

PT-2025-37668

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak was identified and resolved in the ubifs module within the Linux kernel. The issue occurs within the dirty cow znode function during error handling when copying a znode...

PT-2025-37584

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc2-00005-g307c1086d7c9 Description: The Linux kernel contains an issue in cdev device add related to error handling. Specifically, if device add is injected with a fault and returns an error, and dev-devt...

PT-2025-37508

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: An issue was identified in the Linux kernel related to error handling within the ov8865 probe function. A commit intended to fix an error handling path inadvertently introduced resourc...

Linux Distros Unpatched Vulnerability : CVE-2025-39747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm: Add error handling for krealloc in metadata setup Function msmioctlgeminfosetmetadata now checks for krealloc failure and returns -ENOMEM, avoiding...

PT-2025-42624

Name of the Vulnerable Software and Affected Versions Squid versions prior to 7.2 Squid versions 3.x through 3.5.28 Squid versions 4.x through 4.17 Squid versions 5.x through 5.9 Squid versions 6.x through 6.14 Squid versions 7.x through 7.1 Description Squid, a caching proxy for the Web, contain...

SUSE-SU-2025:03209-1 Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002322 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in tapriodevnotifier bsc1245504. - CVE-2025-21999: proc: fix UAF in procgetinode bsc1242579. - CVE-2025-38001: netsched: hfsc: Address...

ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered

...

wifi: ath12k: Decrement TID on RX peer frag setup error handling

...

drm/msm: Add error handling for krealloc in metadata setup

...

SUSE CVE-2025-39768

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix complex rules rehash error flow Moving rules from matcher to matcher should not fail. However, if it does fail due to various reasons, the error flow should allow the kernel to continue functioning albeit with...