Rocky Linux 8 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (crlsa-2026_9131)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20269131 advisory. kernel: scsi: qla2xxx: Fix improper freeing of purex item CVE-2025-68741 kernel: ALSA: aloop: Fix racy access at PCM trigger CVE-2026-23191 Tenable has...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort pat...

RLSA-2026:9131 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: scsi: qla2xxx: Fix improper freeing of purex item CVE-2025-68741 kernel: ALSA: aloop: Fix racy access at PCM trigger CVE-2026-23191 For more details about the security issues, including t...

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: scsi: qla2xxx: Fix improper freeing of purex item CVE-2025-68741 kernel: ALSA: aloop: Fix racy access at PCM trigger CVE-2026-23191 For more details about the security issues, including t...

ROS-20260313-73-0022

A vulnerability in the raid1reshape function of the Linux operating system kernel is related to incorrect resource clearing or freeing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

Apache Tomcat Resource Management Error Vulnerability (CNVD-2025-31393)

Apache Tomcat is the United States Apache Apache Foundation of a lightweight Web application server . Used to implement the Servlet and JavaServer Page JSP support. A resource management error vulnerability exists in Apache Tomcat that originates from improperly closing or freeing resources and c...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improperly freeing memory regions, which could lead to resource leaks or other unexpected problems...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly freeing memory when using debugfslookup, which could lead to a memory leak...

PT-2025-10074

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the amdkfd component. The issue arises from the improper freeing of gang ctx bo when initialization of the user que...

Authorization Bypass

xen is vulnerable to authorization bypass. The vulnerability exists while adding logic to support XDP eXpress Data Path, allowing for SKBs having references pointers retained for further processing to nevertheless be freed...

PT-2022-29545

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential security issue exists due to improper freeing of a watch in the watch queue. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.8 a...

PT-2022-30163

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential security issue exists due to improper freeing of a watch in the watch queue. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.8...

PT-2022-29855

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.16.18 Description A potential security issue exists due to improper freeing of a watch in the watch queue. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2022-30387

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists due to improper freeing of a watch in the watch queue. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2021-24670

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.5 Description A potential security issue exists due to the improper freeing of gadget structures in the USB dwc3 gadget driver. The actual impact and attack plausibility have not yet been proven...

PT-2021-28664

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.5 Description A potential security issue exists due to the improper freeing of gadget structures in the USB dwc3 gadget driver. The actual impact and attack plausibility have not yet been proven...