The vulnerability of the hfi1_ipoib_tx_timeout() function in the drivers/infiniband/hw/hfi1/ipoib_tx.c module of the Linux operating system’s InfiniBand driver allows a hacker to gain access to protected information.

The vulnerability of the hfi1ipoibtxtimeout function in the drivers/infiniband/hw/hfi1/ipoibtx.c module of the Linux operating system’s InfiniBand driver lies in the absence of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to gain...

The vulnerability of the nixge_hw_dma_bd_release() function in the drivers/net/ethernet/ni/nixge.c module of the Linux operating system’s network adapter support driver allows a hacker to cause a service failure.

The vulnerability of the nixgehwdmabdrelease function in the drivers/net/ethernet/ni/nixge.c module of the Linux operating system’s network adapter support driver lies in the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gss_import_v2_context() function in the net/sunrpc/auth_gss/gss_krb5_mech.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the gssimportv2context function in the net/sunrpc/authgss/gsskrb5mech.c module of the Linux kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SIMATIC S7-1500 Missing Release of Memory after Effective Lifetime (CVE-2024-56644)

In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6negativeadvice when this function is executed for an expired IPv6 route located in the exception table. This plugin only works with Tenable.ot...

Siemens SIMATIC S7-1500 Missing Release of Memory after Effective Lifetime (CVE-2024-56779)

nfsd: fix nfs4openowner leak when concurrent nfsd4open occur The action force umountumount -f will attempt to kill all rpctask even umount operation may ultimately fail if some files remain open. Consequently, if an action attempts to open a file, it can potentially send two rpctask to nfs server...

The vulnerability of the drm_test_check_broadcast_rgb_auto_cea_mode_vic_1() function in the drivers/gpu/drm/tests/drm_hdmi_state_helper_test.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the drmtestcheckbroadcastrgbautoceamodevic1 function in the drivers/gpu/drm/tests/drmhdmistatehelpertest.c module of the Linux kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to caus...

Advisory ROSA-SA-2025-3072

Software: libwebp 1.0.0 OS: ROSA Virtualization 3.0 unaffected versions = libwebp-1.0.0.0-10.0.1.rv30 affected versions libwebp-1.0.0.0-10.0.1.rv30 CVE-ID: CVE-2020-36332 BDU-ID: CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the libwebp library for WebP image encoding and decoding is associated...

The vulnerability of the bpf_parse_param() function in the kernel/bpf/inode.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bpfparseparam function in the kernel/bpf/inode.c module of the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dbitmap_free() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dbitmapfree function in the Linux operating system’s kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989391 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix wrong reg type conversion in releasereference Some helper functions will allocate memory...

Vulnerability of the mlx5e_tc_hairpin_update_dead_peer() function in the drivers/net/ethernet/mellanox/mlx5/core/en_tc.c file – a driver for supporting Mellanox Ethernet network adapters in Linux operating systems, which allows a hacker to cause a service failure.

Vulnerability of the mlx5etchairpinupdatedeadpeer function in the drivers/net/ethernet/mellanox/mlx5/core/entc.c file – The Mellanox Ethernet network adapter driver for Linux operating systems is vulnerable due to the lack of memory release after the effective lifespan of the driver. Exploiting...

Astra Linux – Vulnerability in Apache2

Delayed memory release after the effective lifetime vulnerability in the Apache HTTP Server. This issue affects the Apache HTTP Server: from version 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes this issue...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: The issue of a refcount leak causing resources not being released has been fixed. When ksmbdconnreleasingopinfo-conn returns true, the refcount was not decremented properly, resulting in a refcount leak. This prevents the...

The vulnerability of the user_cluster_connect() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the userclusterconnect function in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Missing Release of Memory after Effective Lifetime (CVE-2024-44944)

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nfexpectgetid helper function to calculate the expectation ID, otherwise LSB of the expectation object address is...

The vulnerability of the e5010_probe function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the e5010probe function in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the tcp_ao_copy_all_matching() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the tcpaocopyallmatching function in the Linux operating system is related to improper memory release after the effective lifespan has ended. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Siemens SIMATIC Devices Missing Release of Memory after Effective Lifetime (CVE-2024-35978)

Bluetooth: Fix memory leak in hcireqsynccomplete This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503414; scriptversion"1.2";...

Siemens SIMATIC Devices Missing Release of Memory after Effective Lifetime (CVE-2024-58063)

wifi: rtlwifi: fix memory leaks and invalid access at probe error path This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503591; scriptversion"1.2";...

Siemens SIMATIC Devices Missing Release of Memory after Effective Lifetime (CVE-2024-39493)

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADFDEVRESETSYNC memory leak Using completiondone to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called...