kernel: mm/damon/reclaim: fix potential memory leak in damon_reclaim_init()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: fix potential memory leak in damonreclaiminit damonreclaiminit allocates a memory chunk for ctx with damonnewctx. When damonselectops fails, ctx is not released, which will lead to a memory leak. We should relea...

kernel: usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()

A flaw was found in the aspeed-vhub module in the Linux kernel. A missing decrement of the reference count will cause a memory leak, potentially impacting system performance and resulting in a denial of service...

kernel: usb: renesas: Fix refcount leak bug

In the Linux kernel, the following vulnerability has been resolved: usb: renesas: Fix refcount leak bug In usbhsrza1hardwareinit, offindnodebyname will return a node pointer with refcount incremented. We should use ofnodeput when it is not used anymore...

kernel: net: sched: cake: fix null pointer access issue when cake_init() fails

In the Linux kernel, the following vulnerability has been resolved: net: sched: cake: fix null pointer access issue when cakeinit fails When the default qdisc is cake, if the qdisc of devqueue fails to be inited during mqprioinit, cakereset is invoked to clear resources. In this case, the tins is...

Privilege Escalation

cloud-init is vulnerable to Privilege Escalation. The vulnerability exists because the sensitive data could be exposed in logs of the library, which allows an attacker to use this information to find hashed passwords and possibly escalate their privilege...

PT-2025-26080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the mtk pcie init irq domains function. The of get child by name function returns a node pointer with an...

PT-2025-13176

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A use-after-free issue was identified in the Linux kernel, specifically in the eth skb pkt type function. This issue occurred when bpf prog test run xdp passed an invalid value as th...

PT-2025-18642

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-ptr-deref error was reported in the Linux kernel's RDMA/core. The issue occurs because the failure of roce gid mgmt init is ignored, leading to the destruction of an unallocated...

Fedora: Security Advisory for cloud-init (FEDORA-2023-c17dde4052)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: cloud-init-23.1.2-1.fc38

Cloud-init is a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install ssh keys and to let the user run various scripts...

Fedora 38 : cloud-init (2023-c17dde4052)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c17dde4052 advisory. Update to 23.1.2 and fix CVE-2023-1786 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Databricks Platform Cluster Isolation Bypass

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Bypassing cluster isolation through insecure defaults and shared storage product: Databricks Platform vulnerable version: PaaS version as of 2023-01-26 fixed version:...

sensitive data exposure in cloud-init logs

...

Moderate Photon OS Security Update - PHSA-2023-5.0-0001

Updates of 'redis', 'libxml2', 'cloud-init' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-5.0-91-0001

Updates of 'redis', 'libxml2', 'cloud-init' packages of Photon OS have been released...

sensitive data exposure in cloud-init logs

...

FreeBSD : cloud-init -- sensitive data exposure in cloud-init logs (02562a78-e6b7-11ed-b0ce-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 02562a78-e6b7-11ed-b0ce-b42e991fc52e advisory. - Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use th...

Moderate Photon OS Security Update - PHSA-2023-4.0-0383

Updates of 'wireshark', 'cloud-init' packages of Photon OS have been released...

CLSA-2023-1682604577 Fix of 53 CVEs

CVE-2022-1198 - drivers: hamradio: 6pack: fix UAF bug caused by modtimer Bionic update: upstream stable patchset 2022-03-04 LP: 1963717 // CVE-2020-36516 - ipv4: avoid using shared IP generator for connected sockets CVE-2022-36879 - xfrm: xfrmpolicy: fix a possible double xfrmpolsput in...

CVE-2023-1786

A vulnerability was found in cloud-init. With this flaw, exposure of sensitive data is possible in world-readable cloud-init logs. This flaw allows an attacker to use this information to find hashed passwords and possibly escalate their privilege...