CVE-2026-65970

A flaw was found in OpenImageIO, a toolset for image file manipulation. A remote attacker could exploit this vulnerability by providing a specially crafted ZIP-compressed TIFF image file. When processed with TIFF multithreading enabled, the software can prematurely release memory while background...

ROS-20260923-73-0028

The vulnerability of the dallocparallel function in the fs/dcache.c module of the Linux kernel file system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0034

The vulnerability of the userclusterconnect function in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0093

The vulnerability of the fastrpcPutArgs function in the drivers/misc/fastrpc.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0082

The vulnerability of the arcserialprobe function in the drivers/tty/serial/arcuart.c file of the console TTY driver in the Linux kernel’s serial port module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0061

The vulnerability of the gadgetBind function in the drivers/usb/gadget/legacy/rawgadget.c file of the Linux USB device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0079

The vulnerability of the ttctimerprobe function in the drivers/clocksource/timer-cadence-ttc.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260923-73-0055

The vulnerability of the imx8mpclocksprobe function in the drivers/clk/imx/clk-imx8mp.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260921-73-0122

The vulnerability of the ipcidralloc function in the Linux operating system is related to improper memory release. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20260918-73-0059

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260918-73-0117

The vulnerability of the ipv4/foucore.c component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ROS-20260916-73-0033

The vulnerability of the nftmapelemdeactivate function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the pdpl-user utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the pdp-ls utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the pdpl-file utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: clk: hisilicon: hi3559a: A mistake in the devmkfree function has been fixed. pclk is an array allocated just before the for loop for all clk elements that need to be registered. It is incremented at each loop iteration. If a...

Astra Linux – Vulnerability in Parsec

The vulnerability of the parsecchkislocaladmin function in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the freetree function in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the psaud utility within the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via improper cleanup of the zlib compression stream when a client disconnects before the response finishes. The onResponseClose handler was absent, leaving native zlib handles unrelease...