31 matches found
CVE-2026-72282
In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvmiobusgetdev locking responsibilities to callers kvmiobusgetdev returns a device that is only matched by the address, and nothing else. This can cause a lifetime issue if the matched device is not the expected type, a...
CVE-2026-72282
CVE-2026-72282 — Linux Kernel (KVM) Concretely, the vulnerability stems from kvm_io_bus_get_dev() returning a device matched only by address, which may lead to a lifetime issue if the device is not the expected type after the caller’s inspection once the srcu lock has been dropped. The simplest f...
CVE-2026-68245
CVE-2026-68245 affects the Linux kernel’s DRM/amdgpu component. The issue is a use-after-unlock: a vm pointer retrieved via amdgpu_vm_get_vm_from_pasid() is used after xa_unlock_irqrestore releases the lock, leaving the pointer vulnerable to modification. The documented fix removes the dependency...
CVE-2026-68245 drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lifetime issue of amdgpuvmgettaskinfopasid The vm pointer returned from amdgpuvmgetvmfrompasid is only valid while the lock is still being held. Once xaunlockirqrestore is called and returned, the pointer is no...
RUSTSEC-2026-0198 `Report::frames_mut` allows aliased mutable references
Affected versions of this crate return an iterator from Report::framesmut whose &mut Frame items have lifetimes independent of the iterator, so all yielded references can be held at the same time. A yielded frame's sources are also yielded by the iterator and reachable through the parent frame vi...
can: ucan: fix devres lifetime
...
ROS-20260414-73-0023
Vulnerability in kernel-lt related to lack of memory release after effective lifetime. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
CVE-2026-3236
In affected versions of Octopus Server it was possible to create a new API key from an existing access token resulting in the new API key having a lifetime exceeding the original API key used to mint the access token...
EUVD-2025-197912
Missing Release of Resource after Effective Lifetime CWE-772 in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30...
EUVD-2019-15379
Malware in sbrugna...
EUVD-2019-15387
Malware in sbrugna...
EUVD-2018-17874
Malware in sbrugna...
EUVD-2022-52806
Malicious code in bioql PyPI...
EUVD-2024-52822
Malicious code in bioql PyPI...
SUSE CVE-2025-21677
In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...
CVE-2023-39180
CVE-2023-39180 affects the Linux kernel ksmbd module. The root cause is improper memory release after the memory’s lifetime in SMB2_READ handling, enabling a network-based DoS without authentication on systems with ksmbd enabled. Public details confirm impact as denial-of-service; no vendor patch...
PT-2024-73: Unlimited session lifetime in Password Pusher
The vulnerability was identified in Password Pusher versions prior to 1.48.0. The application does not limit the storage time of the session identifier or credentials, or this time is excessively long. An attacker can reuse old credentials or session identifiers to log in as another user and gain...
DEBIAN-CVE-2024-46683
In the Linux kernel, the following vulnerability has been resolved: drm/xe: prevent UAF around preempt fence The fence lock is part of the queue, therefore in the current design anything locking the fence should then also hold a ref to the queue to prevent the queue from being freed. However,...