304 matches found
CVE-2026-23160 octeon_ep: Fix memory leak in octep_device_setup()
In the Linux kernel, the following vulnerability has been resolved: octeonep: Fix memory leak in octepdevicesetup In octepdevicesetup, if octepctrlnetinit fails, the function returns directly without unmapping the mapped resources and freeing the allocated configuration memory. Fix this by jumpin...
CVE-2026-23160
In the Linux kernel, the following vulnerability has been resolved: octeonep: Fix memory leak in octepdevicesetup In octepdevicesetup, if octepctrlnetinit fails, the function returns directly without unmapping the mapped resources and freeing the allocated configuration memory. Fix this by jumpin...
UBUNTU-CVE-2026-23125
In the Linux kernel, the following vulnerability has been resolved: sctp: move SCTPCMDASSOCSHKEY right after SCTPCMDPEERINIT A null-ptr-deref was reported in the SCTP transmit path when SCTP-AUTH key initialization fails: ================================================================== KASAN:...
CVE-2026-23125 sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
In the Linux kernel, the following vulnerability has been resolved: sctp: move SCTPCMDASSOCSHKEY right after SCTPCMDPEERINIT A null-ptr-deref was reported in the SCTP transmit path when SCTP-AUTH key initialization fails: ================================================================== KASAN:...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004876)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004876 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ipvscleanupbatch During the initialization of ipvsconnnetinit, if file...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004830)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004830 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls...
OESA-2026-1074 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix possible memory leak in hpsainitone The hpdaallocctlrinfo allocates h and its field replymap. However, in hpsainitone, if allocpercpu failed, the...
PT-2026-6111
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19-rc3 Description The Broadcom network driver in the Linux kernel contains a flaw related to PTP Precision Time Protocol handling. Specifically, a NULL pointer dereference can occur in the bnxt ptp enable...
PT-2026-8155
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the octep device setup function within the Linux kernel. Specifically, if octep ctrl net init fails, the function returns without releasing allocated memory and...
SUSE CVE-2022-50825
In the Linux kernel, the following vulnerability has been resolved: usb: typec: wusb3801: fix fwnode refcount leak in wusb3801probe I got the following report while doing fault injection test: OF: ERROR: memory leak, expected refcount 1 instead of 4, ofnodeget/ofnodeput unbalanced - destroy cset...
CVE-2022-50825
In the Linux kernel, the following vulnerability has been resolved: usb: typec: wusb3801: fix fwnode refcount leak in wusb3801probe I got the following report while doing fault injection test: OF: ERROR: memory leak, expected refcount 1 instead of 4, ofnodeget/ofnodeput unbalanced - destroy cset...
PT-2025-53943
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the Linux kernel related to the wusb3801 probe function. Specifically, a reference count leak can occur within wusb3801 probe if wusb3801 hw init fails. This le...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992392)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992392 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: vt6655: fix some erroneous memory clean-up loops In some initialization functions of thi...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992335)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992335 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ipvsappnetcleanup During the initialization of ipvsappnetinit, if file ipvsa...
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
...
EUVD-2022-55781
In the Linux kernel, the following vulnerability has been resolved: net: fix UAF issue in nfqnlnfhookdrop when opsinit failed When the opsinit interface is invoked to initialize the net, but ops-init fails, data is released. However, the ptr pointer in net-gen is invalid. In this case, when...
CVE-2022-50780
In the Linux kernel, the following vulnerability has been resolved: net: fix UAF issue in nfqnlnfhookdrop when opsinit failed When the opsinit interface is invoked to initialize the net, but ops-init fails, data is released. However, the ptr pointer in net-gen is invalid. In this case, when...
CVE-2022-50780 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
In the Linux kernel, the following vulnerability has been resolved: net: fix UAF issue in nfqnlnfhookdrop when opsinit failed When the opsinit interface is invoked to initialize the net, but ops-init fails, data is released. However, the ptr pointer in net-gen is invalid. In this case, when...
CVE-2022-50780
CVE-2022-50780 is a Linux kernel vulnerability described across multiple sources as a use-after-free (UAF) in nfqnl_nf_hook_drop(), triggered when ops_init() fails during net namespace setup. The root cause, as documented, is that data allocated during setup_net() is freed when ops->init() fai...
Linux Distros Unpatched Vulnerability : CVE-2022-50748
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipc: mqueue: fix possible memory leak in initmqueuefs commit db7cfc380900 ipc: Free mqsysctls if ipc namespace creation failed Here's a similar memory leak to t...