X.Org: Xwayland: Use-after-free of the root cursor

A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free...

The vulnerability of the igc_clean_tx_ring() function in the drivers/net/ethernet/intel/igc/igc_main.c file of the Linux kernel’s Ethernet adapter support driver allows a attacker to cause a service failure.

The vulnerability of the igccleantxring function in the drivers/net/ethernet/intel/igc/igcmain.c file of the Linux kernel’s Ethernet adapter support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the io_sq_thread() function in the io_uring/sqpoll.c module of the Linux kernel’s asynchronous input/output interface allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iosqthread function in the iouring/sqpoll.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the bfq_waker_bfqq() function in the block/bfq-iosched.c module allows a hacker to trigger a service failure in Linux’s kernel-level block support mechanism.

The vulnerability of the bfqwakerbfqq function in the block/bfq-iosched.c module related to Linux’s block-level kernel support involves the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the default_operstate() function in the net/core/link_watch.c module exposes the support for network functions in the Linux kernel. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the defaultoperstate function in the net/core/linkwatch.c module related to the support for kernel network functions in the Linux operating system is associated with the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the ublk_unquiesce_dev() function in the drivers/block/ublk_drv.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ublkunquiescedev function in the drivers/block/ublkdrv.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protect...

net/smc: protect link down work from execute after lgr freed

...

The vulnerability of the Windows Win32 Kernel Subsystem, which allows a hacker to elevate their privileges to a system level.

The vulnerability of the Windows Win32 Kernel Subsystem in the operating system is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system-level level...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in the Linux kernel that stems from a device not being properly freed when destroying a network namespace, which could lead to...

kernel: can: bcm: Fix UAF in bcm_proc_show()

In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcmprocshow BUG: KASAN: slab-use-after-free in bcmprocshow+0x969/0xa80 Read of size 8 at addr ffff888155846230 by task cat/7862 CPU: 1 PID: 7862 Comm: cat Not tainted 6.5.0-rc1-00153-gc8746099c197 230 Hardwar...

The vulnerability of the WhoDB database management system lies in its ability to exploit memory after it is freed, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the WhoDB database management system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2025-20503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to error handling in the amd powerplay create function, specifically when amdgpu cgs create device fails. To...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not verifying that the target vCPU is online, which could result in access to freed memory...

PT-2025-23585 · Qualcomm · Snapdragon +18

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption during the processing of IOCTL commands. This occurs when the buffer in write loopback mode is accessed after being freed. Recommendations: At the moment...

SUSE CVE-2022-49201

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: fix race between xmit and reset There is a race between reset and the transmit paths that can lead to ibmvnicxmit accessing an scrq after it has been freed in the reset path. It can result in a crash like: Kernel attempt...

DEBIAN-CVE-2022-49201

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: fix race between xmit and reset There is a race between reset and the transmit paths that can lead to ibmvnicxmit accessing an scrq after it has been freed in the reset path. It can result in a crash like: Kernel attempt...

DEBIAN-CVE-2022-49183

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix ref leak when switching zones When switching zones or network namespaces without doing a ct clear in between, it is now leaking a reference to the old ct entry. That's because tcfctskbnfctcached returns fals...

SUSE CVE-2025-26594

A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees the root cursor, the internal reference points to freed memory and causes a use-after-free...

CVE-2022-49369 amt: fix possible memory leak in amt_rcv()

In the Linux kernel, the following vulnerability has been resolved: amt: fix possible memory leak in amtrcv If an amt receives packets and it finds socket. If it can't find a socket, it should free a received skb. But it doesn't. So, a memory leak would possibly occur...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from bonding's use of freed memory after 802.3ad slave unbundling...