PT-2022-35667 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: The issue is related to a refcount leak in the tegra210 clock init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

CVE-2022-39393 Wasmtime vulnerable to data leakage between instances in the pooling allocator

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator where when a linear memory is reused for another instance the initial heap snapshot of the prior instance can be visible, erroneously ...

CVE-2022-39393: Sensitive Information in Resource Not Removed Before Reuse

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator where when a linear memory is reused for another instance the initial heap snapshot of the prior instance can be visible, erroneously ...

CVE-2022-39393

Wasmtime vulnerability CVE-2022-39393: prior to versions 2.0.2 and 1.0.2, a bug in the pooling instance allocator can cause the initial heap snapshot of a prior instance to be visible to the next instance when reusing linear memory. This data leakage between instances can lead to information expo...

State varaible marketplace has never been initialized in LooksRareProxy.sol

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. State varaible marketplace has never been initialized in LooksRareProxy.sol. Although it has been initialized in the constructor, it won't count since functions such as execute will only be called via...

CVE-2022-39393 Wasmtime vulnerable to data leakage between instances in the pooling allocator

Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator where when a linear memory is reused for another instance the initial heap snapshot of the prior instance can be visible, erroneously ...

PT-2022-36759 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to an index-out-of-bounds crash. Technical details include the crash type and state, which involve functions such as str init embed, str new, and mrb str new...

kernel: cpufreq: CPPC: Fix potential memleak in cppc_cpufreq_cpu_init

In the Linux kernel, the following vulnerability has been resolved: cpufreq: CPPC: Fix potential memleak in cppccpufreqcpuinit It's a classic example of memleak, we allocate something, we fail and never free the resources. Make sure we free all resources on policy -init failures...

cloud-init bug fix and enhancement update

An update is available for cloud-init. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8...

PT-2025-7968

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the drm/virtio component. The issue arises when the virtio gpu object shmem init function fails, potentially due ...

PT-2025-8604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the RDMA/cm component. The problem occurs when cm init listen fails, causing the allocated resource for cm id...

PT-2025-53990

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the realtime counter init function within the ARM OMAP2+ architecture of the Linux kernel. The “sys clk” resource is allocated using clk get but is not released...

PT-2025-53111

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to improper handling of device nodes in the tegra-video driver. Specifically, a use-after-free condition can occur during device removal. The iss...

PT-2022-38088

Уязвимость функции smc init модуля net/smc/af smc.c ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-37591

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was resolved in the ocfs2 stack glue init function within the OCFS2 module. Specifically, the ocfs2 table header was not being freed if ocfs2 sysfs init failed, leading to ...

PT-2025-40110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's x86/fpu component, specifically within the copy xstate to uabi function. This issue arises when an extended state component is present in the initial...

PT-2025-38335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue was resolved in the Linux kernel’s networking subsystem net: hinic. Specifically, when the hinic set cmdq depth function fails during the hinic init cmdqs function...

PT-2025-40669

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s iommu/vt-d component related to memory management during the initialization of Direct Memory Access Remapping Services DMARS. Specifically, the issue...

PT-2025-40137

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the cake queuing discipline qdisc. Specifically, a null pointer dereference can occur when the cake init function fails during the...

PT-2025-38166

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the networking scheduler sfb where a null pointer dereference can occur when sfb init fails during the initialization of the default queue discipline...