CVE-2025-0932 Mali GPU Userspace Driver allows access to already freed memory

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to perform valid GPU processing operations, including via WebGL or WebGPU, to gain access to alrea...

Expired Pointer Dereference

Overview Affected versions of this package are vulnerable to Expired Pointer Dereference in the parsing process of xsl nodes. An attacker can cause the application to crash by triggering the dereference of expired pointers after memory has been freed. Remediation A fix was pushed into the master...

libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may acce...

The vulnerability of the Universal Plug and Play (UPnP) Device Host Service in Microsoft Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Universal Plug and Play UPnP Device Host Service in Microsoft Windows operating systems is related to the ability to utilize freed memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

UBUNTU-CVE-2025-7425

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may acce...

Vulnerability of the macbremove() function in the drivers/net/ethernet/cadence/macbpci.c module – a driver for supporting Ethernet adapter support in Cadence’s Linux-based operating system, which allows a hacker to cause a service failure.

Vulnerability of the macbremove function in the drivers/net/ethernet/cadence/macbpci.c module – The Cadence Ethernet adapter driver for Linux operating systems is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a servic...

The vulnerability of the fl_walk() function in the net/sched/cls_flower.c module of the network scheduling subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the flwalk function in the net/sched/clsflower.c module of the network scheduling subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the `blk_mq_alloc_disk_for_queue()` function in the `block/blk-mq.c` module, which is part of the Linux kernel’s block-level support for distributed memory management, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the blkmqallocdiskforqueue function in the block/blk-mq.c module, which supports the block-level kernel in the Linux operating system, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the j1939_sk_match_dst() function in the net/can/j1939/socket.c module allows a hacker to cause a service failure in Linux-based systems with CAN-j1939 sockets.

The vulnerability of the j1939skmatchdst function in the net/can/j1939/socket.c module relates to the reuse of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `find_or_create_cached_dir()` function in the fs/smb/client/cached_dir.c module allows a hacker to cause a service failure in Linux-based operating systems with SMB kernel support.

The vulnerability of the findorcreatecacheddir function in the fs/smb/client/cacheddir.c module, which is part of the SMB client support in Linux kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the j1939_netdev_start() function in the net/can/j1939/main.c module allows a hacker to cause a service failure for Linux kernel-based CAN bus interfaces.

The vulnerability of the j1939netdevstart function in the net/can/j1939/main.c module, which supports J1939 CAN interfaces in Linux kernels, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the retract_page_tables() function in the mm/khugepaged.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the retractpagetables function in the mm/khugepaged.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the __kmem_cache_create() function in the mm/slub.c module of the Linux kernel’s memory management subsystem allows a hacker to induce a service failure.

The vulnerability of the kmemcachecreate function in the mm/slub.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __nft_release_table() function in the net/netfilter/nf_tables_api.c module of the netfilter component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the nftreleasetable function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smb20_oplock_break_ack() function in the Linux file system support module fs/ksmbd/smb2pdu.c allows a attacker to cause a service failure.

The vulnerability of the smb20oplockbreakack function in the fs/ksmbd/smb2pdu.c module of the Linux file system support module is related to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bpf_xdp_link_attach() function in the net/core/dev.c module, which supports networking functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bpfxdplinkattach function in the net/core/dev.c module, which supports networking functions of the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Vulnerability of the iscsi_prep_bidi_ahs() function in the drivers/scsi/libiscsi.c module – This driver supports SCSI devices in Linux operating systems. It can be exploited by attackers to cause service interruptions.

Vulnerability of the iscsiprepbidiahs function in the drivers/scsi/libiscsi.c module – The Linux system’s SCSI device driver framework involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ath12k_dp_cc_cleanup() function in the drivers/net/wireless/ath/ath12k/dp.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath12kdpcccleanup function in the drivers/net/wireless/ath/ath12k/dp.c module of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the export_statsdestroy() function in the fs/nfsd/export.c module of the Linux kernel’s Network File System support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the exportstatsdestroy function in the fs/nfsd/export.c module, which is part of the Linux kernel’s network file system support, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the smsc75xx_bind() function in the drivers/net/usb/smsc75xx.c file allows a hacker to cause a service failure. This vulnerability relates to Linux kernel-based USB network adapters.

The vulnerability of the smsc75xxbind function in the drivers/net/usb/smsc75xx.c file, which is related to Linux kernel USB network adapters, stems from the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...