SSLPatch

SSL Patch CVE-2014-1266 Copyright c 2014 Linus Yang Introduction CVE-2014-1266 , or known as "goto fail SSL verification exploit", is a very serious SSL/TLS vulnerability of iOS and OS X. Apple issues iOS 6.1.6 and 7.0.6 to fix this problem, but ignores some users who can't or just don't want to...

SUSE CVE-2026-64145

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dmabuffer leak on bus acquire failure wilcwlanfirmwaredownload allocates dmabuffer with kmalloc at the top of the function and uses a 'fail:' label to free it via kfreedmabuffer on error. All later error paths...

CVE-2026-64145

The wilc1000 Wi-Fi driver's firmware-download function allocates a DMA buffer via kmalloc but leaks it on a specific early error path (bus acquire failure) due to a bare return ret; instead of goto fail;. Repeated failures exhaust kernel memory, causing system instability or denial of service. Th...

CVE-2026-64145 wifi: wilc1000: fix dma_buffer leak on bus acquire failure

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dmabuffer leak on bus acquire failure wilcwlanfirmwaredownload allocates dmabuffer with kmalloc at the top of the function and uses a 'fail:' label to free it via kfreedmabuffer on error. All later error paths...

CVE-2026-64145

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dmabuffer leak on bus acquire failure wilcwlanfirmwaredownload allocates dmabuffer with kmalloc at the top of the function and uses a 'fail:' label to free it via kfreedmabuffer on error. All later error paths...

CVE-2026-64145 wifi: wilc1000: fix dma_buffer leak on bus acquire failure

In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dmabuffer leak on bus acquire failure wilcwlanfirmwaredownload allocates dmabuffer with kmalloc at the top of the function and uses a 'fail:' label to free it via kfreedmabuffer on error. All later error paths...

PT-2026-61462

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the wilc wlan firmware download function when a bus acquire failure happens. The function allocates a dma buffer using kmalloc, but an early error path uses a...

UBUNTU-CVE-2026-23418

In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...

PT-2022-29114

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.104 Description The issue is related to the USB gadget functionality in the Linux Kernel. It involves clearing related members when a goto fail condition occurs. The actual impact and attack plausibility ha...

PT-2022-29152

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.183 Description The issue is related to the USB gadget functionality in the Linux Kernel. It involves clearing related members when a goto fail occurs. The actual impact and attack plausibility have not yet...

PT-2022-29216

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.305 Description The issue is related to the USB gadget functionality in the Linux Kernel. It involves clearing related members when a goto fail condition occurs. The actual impact and attack plausibility of...

PT-2022-28990

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.13 Description The issue is related to the USB gadget in the Linux Kernel, where certain members are not properly cleared when a goto fail occurs. The actual impact and attack plausibility have not yet been...

Mozilla Offers Bug Bounty for Heartbleed-like Crypto Bugs

As part of a special security bug bounty program, Mozilla Corporation is offering $10,000 to anyone who reports a qualifying security vulnerability in the new cryptography library it plans to deploy in a yet-to-be-released version of Firefox. Today, Mozilla’s security engineering team announced t...