CVE-2022-42864

CVE-2022-42864: Diabolical Cookies What is this repo? This is my incomplete proof-of-concept exploit for CVE-2022-42864, a time-of-check-time-of-use vulnerability in IOHIDFamily that was fixed in iOS 16.2 / macOS Ventura 13.1. What is the status of the proof-of-concept? The exploit currently...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: cpuidle: dtidlegenpd: kfree the original name allocation dtidlepdalloc calls kasprintf to get the full node path, then passes pd-name to kbasename for processing. dtidlepdfree frees pd-name, which is no longer the beginning of th...

DEBIAN-CVE-2026-99039

In the Linux kernel, the following vulnerability has been resolved: memstick: core: wait for request completion before freeing card In memstickalloccard and memsticksetrwaddr, waitforcompletiontimeout is used to wait for device identification and address configuration requests to complete. The...

PT-2026-122016

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free write occurs in the memstick subsystem when wait for completion timeout expires in the memstick alloc card and memstick set rw addr functions. Because the subsystem...

CVE-2026-80924

A flaw was found in the Linux kernel's Kerberos 5 krb5 cryptography module. When handling derived key buffers, the cryptokrb5prepareencryption and cryptokrb5preparechecksum functions incorrectly use kfree instead of kfreesensitive for memory deallocation. This oversight leaves sensitive key...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: hdlcppp: Synchronize per-protocol timers before freeing hdlc state Each PPP control protocol LCP/IPCP/IPV6CP embedded in struct ppp registers a timer via timersetup. This struct ppp represents the hdlc-state allocation;...

PT-2026-117037

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the slab memory allocator when kfree rcu is called while holding the pi lock a raw spinlock in the scheduler. The issue arises because kfree rcu may attempt to...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities arise when binder directly calls kfree to release outdated transactions during the TFUPDATETXN transaction, replacing frozen processes. This bypasses the binderfreetxnfixups function, resulting in a leak of...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.11 contains a security vulnerability. This vulnerability stems from the use of kfree to release GEM objects in a wrong path within virtiogpuvramcreate. The function does not call drmgemobjectrelease, resulting in the released objects remaining in the interval tree of th...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fixed memory leak. Why Resource release is necessary on the error handling path to prevent memory leaks. How This issue was fixed by adding the kfree function to the error handling path...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: Use kvfree for replaced sysctl write buffer procsyscallhandler allocates its temporary sysctl buffer using kvzalloc and passes it to cgroupbpfrunfiltersysctl. Since kvzalloc may fall back to vmalloc for large allocations,...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel up to version 6.2.7, fs/ntfs3/inode.c contains an invalid kfree function because it does not validate the MFT flags before replaying logs...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: socinfo: Add kfree for kstrdup Add kfree to the subsequent error handling routine to prevent memory leaks...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: Class: Fixed possible memory leak in classregister If classaddgroups returns an error, the ‘cp-subsys’ must be unregistered, and the ‘cp’ must be freed. We cannot call ksetunregister here, because the ‘cls’ will be freed in the...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ima: Fix potential memory leak in imainitcrypto When allocation of the SHA1 tfm fails, IMA fails to initialize and exits without freeing the imaalgoarray. Add the missing kfree for imaalgoarray to prevent potential memory leaks...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ppp: Defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tprecv runs in the L2TP UDP-encap softirq RX path: l2tpudpencaprecv - l2tprecvcommon - pppol2tprecv - pppinput&po-chan It runs under rcureadlock which...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup kfree is missing on an error path to free the memory allocated by kstrdup: p = param = kstrdupdata-paramsi, GFPKERNEL; So it is better to free it via kfreep...

Astra Linux – vulnerability in linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: afunix: Calls kfreeskb for dead unixsk-oobskb in GC. syzbot reported a warning 0 in unixgc with a repro, which creates a socketpair and sends one socket’s fd to itself using the peer. socketpairAFUNIX, SOCKSTREAM, 0, 3, 4 = 0...

Astra Linux – vulnerability in linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Fix potential memory leak related to jitdata Be sure to free jitdata via kfree in the error path...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: Thermal: int340x – fixed a memory leak in int3400notify The following memory leaks are likely to occur on my TigerLake platform: - Unreferenced object: 0xffff927c8b91dbc0 size 32 Command: “kworker/0:2”, pid 112, jiffies 429489332...