Lucene search
K

379 matches found

NVD
NVD
added yesterday2 views

CVE-2026-46283

In the Linux kernel, the following vulnerability has been resolved: tpm: Use kfreesensitive to free auth session in tpmdevrelease tpmdevrelease uses plain kfree to free chip-auth, which contains sensitive cryptographic material including HMAC session keys, nonces, and passphrase data struct...

Exploits0References4
Debian CVE
Debian CVE
added 2026/05/28 9:36 a.m.5 views

CVE-2026-46183

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect path kfree with damonsysfslock damonsysfsquotgoal-path can be read and written by users, via DAMON sysfs 'path' file. It can also be indirectly read, for the parameters on,offline committing to...

5.8AI score0.00024EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/05/28 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-45959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree Annotating a local pointer variable, which will be assigned with the kmalloc-family functions,...

7.8CVSS5.9AI score0.00013EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/28 12:0 a.m.5 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of locking protection for the path kfree function in mm damon sysfs-schemes. This...

5.8AI score0.00024EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/27 3:33 p.m.8 views

EUVD-2026-32243

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree Annotating a local pointer variable, which will be assigned with the kmalloc-family functions, with the cleanupkfree attribute will make the address of the local...

5.8AI score0.00013EPSS
Exploits0References4
EUVD
EUVD
added 2026/05/27 3:33 p.m.9 views

EUVD-2026-32388

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix memory leak in GETDATADIRECTSYSFSPATH handler The UVERBSHANDLERMLX5IBMETHODGETDATADIRECTSYSFSPATH function allocates memory for the device path using kobjectgetpath. If the length of the device path exceeds the...

6AI score0.00023EPSS
Exploits0References5
NVD
NVD
added 2026/05/27 2:17 p.m.8 views

CVE-2026-45959

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree Annotating a local pointer variable, which will be assigned with the kmalloc-family functions, with the cleanupkfree attribute will make the address of the local...

7.8CVSS0.00013EPSS
Exploits0References3
OSV
OSV
added 2026/05/27 2:17 p.m.4 views

UBUNTU-CVE-2026-45959

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree Annotating a local pointer variable, which will be assigned with the kmalloc-family functions, with the cleanupkfree attribute will make the address of the local...

7.8CVSS5.8AI score0.00013EPSS
Exploits0References3
OSV
OSV
added 2026/05/27 2:16 p.m.2 views

UBUNTU-CVE-2026-45853

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgpugmcgetnpsmemranges amdgpudiscoverygetnpsinfo internally allocates memory for ranges using kvcalloc, which may use vmalloc for large allocation. Using kfree to release vmalloc memor...

5.8AI score0.00023EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/27 12:18 p.m.38 views

CVE-2026-45959 crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree Annotating a local pointer variable, which will be assigned with the kmalloc-family functions, with the cleanupkfree attribute will make the address of the local...

7.8CVSS0.00013EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/05/27 12:18 p.m.5 views

CVE-2026-45959

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree Annotating a local pointer variable, which will be assigned with the kmalloc-family functions, with the cleanupkfree attribute will make the address of the local...

7.8CVSS5.8AI score0.00013EPSS
Exploits0
CVE
CVE
added 2026/05/27 12:18 p.m.10 views

CVE-2026-45959

The CVE-2026-45959 issue affects the Linux kernel crypto: CCP driver. A local pointer annotated with __cleanup(kfree) could cause kfree to receive the local stack address instead of the allocated memory, leading to a crash. The underlying cause is incorrect cleanup usage; the repository indicates...

7.8CVSS5.8AI score0.00013EPSS
Exploits0References3
CVE
CVE
added 2026/05/27 12:15 p.m.12 views

CVE-2026-45853

In the Linux kernel vulnerability CVE-2026-45853, the AMDGPU driver component amdgpu_gmc_get_nps_memranges() allocated ranges with kvcalloc() (which may use vmalloc()) and previously released memory with kfree(), risking memory corruption when vmalloc memory is involved. The remediation is to use...

5.8AI score0.00023EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.8 views

PT-2026-43795

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the wave5 VPU driver. In the functions wave5 vpu open enc and wave5 vpu open dec, a VPU instance is allocated using kzalloc. If the subsequent allocation for the...

5.4AI score0.00023EPSS
Exploits0References13
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.5 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the incorrect use of the cleanupkfree attribute in the crypto/ccp driver. This improper usage...

7.8CVSS5.8AI score0.00013EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.6 views

PT-2026-43789

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the RDMA/mlx5 component within the UVERBS HANDLERMLX5 IB METHOD GET DATA DIRECT SYSFS PATH function. The function uses kobject get path to allocate memory for the...

5.6AI score0.00023EPSS
Exploits0References13
UbuntuCve
UbuntuCve
added 2026/05/27 12:0 a.m.6 views

CVE-2026-45853

drm/amdgpu: Use kvfree instead of kfree in amdgpugmcgetnpsmemranges...

5.8AI score0.00023EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в linux, linux-5.10

In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Fixed a potential memory leak related to jitdata. Make sure that jitdata is freed through kfree in the error path...

5.5CVSS5.8AI score0.00028EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: ceph: Fix for oops due to invalid pointer for kfree in parselongname This fix addresses a kernel oops that occurs when reading ceph snapshot directories .snap. For example, simply running ls /mnt/myceph/.snap can cause the issue...

5.5CVSS5.7AI score0.00017EPSS
Exploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Assign dhkey to NULL after kfreesensitive. ctrl-dhkey might be used across multiple calls to nvmetsetupdhgroup for the same controller. Therefore, it’s better to set it to NULL after a error-free release, in order to...

7.8CVSS6.3AI score0.00012EPSS
Exploits0References2
Rows per page
Query Builder