UBUNTU-CVE-2026-98642

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to concurrent consumption of ttrace lists in allocbulk Syzkaller repeatedly triggered UAF splats related to nodes in waitingforgpttrace within the bpf memalloc: BUG: KASAN: slab-use-after-free in...

CVE-2026-98642

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to concurrent consumption of ttrace lists in allocbulk Syzkaller repeatedly triggered UAF splats related to nodes in waitingforgpttrace within the bpf memalloc: BUG: KASAN: slab-use-after-free in...

CVE-2026-98642 bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to concurrent consumption of ttrace lists in allocbulk Syzkaller repeatedly triggered UAF splats related to nodes in waitingforgpttrace within the bpf memalloc: BUG: KASAN: slab-use-after-free in...

CVE-2026-98642 bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to concurrent consumption of ttrace lists in allocbulk Syzkaller repeatedly triggered UAF splats related to nodes in waitingforgpttrace within the bpf memalloc: BUG: KASAN: slab-use-after-free in...

EUVD-2026-103556

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to concurrent consumption of ttrace lists in allocbulk Syzkaller repeatedly triggered UAF splats related to nodes in waitingforgpttrace within the bpf memalloc: BUG: KASAN: slab-use-after-free in...

CVE-2026-98642

The Linux kernel contains a Use-After-Free (UAF) vulnerability within the bpf memalloc component. The root cause is a lack of synchronization protecting llist_del_all() during __free_rcu() callbacks, which allows concurrent execution of alloc_bulk() to operate on the waiting_for_gp_ttrace list. T...

PT-2026-94737

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where storing a memalloc noio save token in mddev-noio flags allows one task to save the token and another to restore it. During concurrent suspend sysfs writes, a task c...

EUVD-2025-31841

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 6.0.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2025-39910

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc, mm/kasan: respect gfp mask in kasanpopulatevmalloc kasanpopulatevmalloc and its helpers ignore the caller's gfpmask and always allocate memory using the hardcoded GFPKERNEL flag. This makes them inconsistent with...

Linux Distros Unpatched Vulnerability : CVE-2024-57800

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ALSA: memalloc: prefer dmamappingerror over explicit address checking With CONFIGDMAAPIDEBUG...

openldap: null pointer dereference in ber_memalloc_x function

A vulnerability was found in OpenLDAP, in bermemallocx function, leading to a null pointer dereference. This flaw can result in reduced system memory and cause LDAP authentication failures. The impact is primarily a disruption in authentication processes, which may hinder user access or service...

DEBIAN-CVE-2024-57800

In the Linux kernel, the following vulnerability has been resolved: ALSA: memalloc: prefer dmamappingerror over explicit address checking With CONFIGDMAAPIDEBUG enabled, the following warning is observed: DMA-API: sndhdaintel 0000:03:00.1: device driver failed to check map errordevice...

UBUNTU-CVE-2024-57800

In the Linux kernel, the following vulnerability has been resolved: ALSA: memalloc: prefer dmamappingerror over explicit address checking With CONFIGDMAAPIDEBUG enabled, the following warning is observed: DMA-API: sndhdaintel 0000:03:00.1: device driver failed to check map errordevice...

PT-2025-40084

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s kasan populate vmalloc function and its helpers did not correctly respect the caller’s gfp mask, always using GFP KERNEL instead. This inconsistency with vmalloc, whic...

PT-2025-3579

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-10-133577cad6bf48e5a7848c4338124081393bfe8a+ 759 Description A vulnerability in the Linux kernel has been resolved, related to the ALSA memalloc component. The issue arises when the CONFIG DMA API DEBUG...

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

...

OESA-2023-1334 openldap security update

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

AZL-27011 CVE-2023-2953 affecting package openldap for versions less than 2.4.57-9

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in bermemallocx function...

ti_sysbios_rts MemAlloc Heap Buffer Overflow

The vulnerability of the tisysbiosrtsMemAllocalloc implementation tirtos/packages/ti/sysbios/rts/MemAlloc.xdt in the software development kit for microcontroller families SimpleLink, including CC13XX, CC26XX, CC32XX, and MSP432E4, is caused by a numerical overflow. Exploiting this vulnerability c...