Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: can: esdusb: esdusbreadbulkcallback: fixed the URB memory leak. The memory leak was fixed in a similar manner to the issue in commit 7352e1d5932a “can: gsusb: gsusbreceivebulkcallback: fixed the URB memory leak”. In esdusbopen, t...

SUSE CVE-2026-64585

In the Linux kernel, the following vulnerability has been resolved: can: esdusb: kill anchored URBs before freeing netdevs esdusbdisconnect frees each CAN netdev with freecandev inside its per-netdev loop and only calls unlinkallurbsdev afterwards. The per-netdev private data struct esdusbnetpriv...

CVE-2026-64585 can: esd_usb: kill anchored URBs before freeing netdevs

In the Linux kernel, the following vulnerability has been resolved: can: esdusb: kill anchored URBs before freeing netdevs esdusbdisconnect frees each CAN netdev with freecandev inside its per-netdev loop and only calls unlinkallurbsdev afterwards. The per-netdev private data struct esdusbnetpriv...

CVE-2026-64585

CVE-2026-64585 (Linux kernel): The issue affects the CAN esd_usb subsystem where, after free_candev runs, net_device pointers in priv->tx contexts are dereferenced, leading to use-after-free when killing anchored URBs. The fix reorders teardown to stop TX queues first, then call unlink_all_urb...

PT-2026-68418

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the esd usb disconnect function. The function frees each CAN netdev using free candev within a loop and subsequently calls unlink all urbsdev. Because th...

Linux Distros Unpatched Vulnerability : CVE-2026-64585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: esdusb: kill anchored URBs before freeing netdevs esdusbdisconnect frees each CAN netdev with freecandev inside its per-netdev loop and only calls...

CVE-2025-55649

A NULL pointer dereference in the gfmediamapesd function mediatools/isomtools.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

SUSE CVE-2026-23075

In the Linux kernel, the following vulnerability has been resolved: can: esdusb: esdusbreadbulkcallback: fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a "can: gsusb: gsusbreceivebulkcallback: fix URB memory leak". In esdusbopen, the URBs for USB-in transfers are allocated,...

CVE-2026-23075

In the Linux kernel, the following vulnerability has been resolved: can: esdusb: esdusbreadbulkcallback: fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a "can: gsusb: gsusbreceivebulkcallback: fix URB memory leak". In esdusbopen, the URBs for USB-in transfers are allocated,...

CVE-2026-23075 can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak

In the Linux kernel, the following vulnerability has been resolved: can: esdusb: esdusbreadbulkcallback: fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a "can: gsusb: gsusbreceivebulkcallback: fix URB memory leak". In esdusbopen, the URBs for USB-in transfers are allocated,...

CVE-2026-23075

CVE-2026-23075 affects the Linux kernel CAN networking support. The issue arises from the esd_usb_read_bulk_callback() path where URBs for USB-in transfers are unanchored by the USB core after completion, leading to a memory leak if esd_usb_close() frees URBs that are no longer anchored. The fix ...

EUVD-2026-5468

In the Linux kernel, the following vulnerability has been resolved: can: esdusb: esdusbreadbulkcallback: fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a "can: gsusb: gsusbreceivebulkcallback: fix URB memory leak". In esdusbopen, the URBs for USB-in transfers are allocated,...

CVE-2026-23075 can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak

In the Linux kernel, the following vulnerability has been resolved: can: esdusb: esdusbreadbulkcallback: fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a "can: gsusb: gsusbreceivebulkcallback: fix URB memory leak". In esdusbopen, the URBs for USB-in transfers are allocated,...

The vulnerability of the gfmedia_map_esd function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gfmediamapesd function in the MP4Box utility of the GPAC multimedia platform is related to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the gfmedia_map_esd function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gf-media-map-ESD function in the MP4Box utility of the GPAC multimedia platform is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

MAL-2025-11291 Malicious code in @zalastax/nolb-esd (npm)

The package @zalastax/nolb-esd was found to contain malicious code...

Malicious code in @zalastax/nolb-esd (npm)

The package @zalastax/nolb-esd was found to contain malicious code...

PT-2025-42857

Уязвимость функции gf isom get esd утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием указателя нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-34083

Уязвимость функции gf media map esd утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...

PT-2026-49275

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A NULL pointer dereference occurs in the gf media map esd function within the media tools/isom tools.c file. This issue allows an attacker to trigger a Denial of Service DoS by providing a specially crafted...