Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: Fixed an issue where information leaks occurred in the wilwritefilewmi function. The simplewritetobuffer function will succeed if even a single byte is initialized. However, we need to initialize the entir...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: Wil6210: debugfs: fixed the use of uninitialized variables in wilwritefilewmi Commit 7a4836560a61 replaces the simplewritetobuffer function with memdupuser, but it forgets to change the value returned by the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001477 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel...

CVE-2026-74640: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: fix OOB write in fcpmeterctlget fcpioctlsetmetermap bounds the user-supplied Level Meter map size by the driver's own limit of 255 if map.mapsize 255 || map.meterslots 255 return -EINVAL; and passes it to fcpaddnewctl ...

ROS-20260304-73-0035

A vulnerability in the memdupuser function of the Linux kernel is related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005748)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005748 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix info leak in wilwritefilewmi The simplewritetobuffer function will...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38257)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38257 advisory. - In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Prevent overflow in size...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993128)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993128 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdupuser call fails, the memory...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992344)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992344 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: wil6210: debugfs: fix uninitialized variable use in wilwritefilewmi Commit 7a4836560a61...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: A overflow has been prevented in the size calculation for memdupuser. The number of apqn target list entries contained in the nrapqns variable is determined by the user space through an ioctl call. Therefore, the resul...

EUVD-2022-55434

Malicious code in bioql PyPI...

EUVD-2022-55430

Malicious code in bioql PyPI...

EUVD-2025-20804

Malicious code in bioql PyPI...

SUSE CVE-2022-50348

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdupuser call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks...

DEBIAN-CVE-2022-50348

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdupuser call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks...

CVE-2022-50348

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdupuser call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks...

CVE-2022-50348 nfsd: Fix a memory leak in an error handling path

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdupuser call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks...

CVE-2022-50348

CVE-2022-50348 affects the Linux kernel’s NFS server (nfsd). The vulnerability is a memory leak in an error-path: if memdup_user() fails, memory allocated earlier is not freed, causing a leak. The connected sources confirm the issue and state that it has been resolved in the kernel, but do not pr...

CVE-2022-50348: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdupuser call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks...

The vulnerability of the memdup_user function in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the memdupuser function in Linux operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...