scsi: qla2xxx: Validate sp before freeing associated memory

...

The vulnerability of the attach_default_qdiscs() function in the net/sched/sch_generic.c module of the net/sched/sch subsystem of the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the attachdefaultqdiscs function in the net/sched/schgeneric.c module of the network scheduling subsystem of the Linux operating system’s kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the airspy_probe() function in the drivers/media/usb/airspy/airspy.c file of the Linux operating system’s multimedia device driver module allows a hacker to cause a service failure.

The vulnerability of the airspyprobe function in the drivers/media/usb/airspy/airspy.c file of the Linux multimedia device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mlx5e_init_rep_rx() function in the drivers/net/ethernet/mellanox/mlx5/core/en_rep.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5einitreprx function in the drivers/net/ethernet/mellanox/mlx5/core/enrep.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the `generate_lfp_data_ptrs()` function in the `drivers/gpu/drm/i915/display/intel_bios.c` file of the DRI driver for the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the generatelfpdataptrs function in the drivers/gpu/drm/i915/display/intelbios.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux operating system’s kernel, is related to improper memory release. Exploiting this vulnerability could allow an attacke...

The vulnerability of the SMB2_sess_auth_rawntlmssp_negotiate() function in the fs/cifs/smb2pdu.c module of the Linux kernel file system allows a hacker to induce a service failure.

The vulnerability of the SMB2sessauthrawntlmsspnegotiate function in the fs/cifs/smb2pdu.c module of the Linux kernel operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the vdpasim_free() function in the drivers/vdpa/vdpa_sim/vdpa_sim.c module of the vDPA device driver in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vdpasimfree function in the drivers/vdpa/vdpasim/vdpasim.c module of the vDPA device driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __do_sys_set_mempolicy_home_node() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a attacker to trigger a system failure.

The vulnerability of the dosyssetmempolicyhomenode function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dev_add_physical_location() function in the drivers/base/physical_location.c file of the Linux kernel device driver module allows a attacker to cause a service failure.

The vulnerability of the devaddphysicallocation function in the drivers/base/physicallocation.c file of the Linux kernel device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Vulnerability of the lpfc_rcv_plogi() function in the drivers/scsi/lpfc/lpfc_nportdisc.c module – The SCSI device support driver for the Linux operating system, which allows a hacker to cause service failure.

Vulnerability of the lpfcrcvplogi function in the drivers/scsi/lpfc/lpfcnportdisc.c module – The Linux SCSI device driver has a vulnerability related to improper memory release. Exploiting this vulnerability could allow an attacker to cause service failure...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper memory release when the auxiliarydeviceadd function fails, potentially leading to double...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper memory release in the rockerworldportpostfini function, potentially leading to memory...

The vulnerability of the hns_roce_v2_init() function in the drivers/infiniband/hw/hns/hns_roce_hw_v2.c file of the Linux operating system’s InfiniBand driver module allows a attacker to cause a service failure.

The vulnerability of the hnsrocev2init function in the drivers/infiniband/hw/hns/hnsrocehwv2.c file of the Linux operating system’s InfiniBand driver is related to the re-release of previously released memory. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20260209-73-0027

A vulnerability in the encoding/asn1 component of the Go programming language is related to a lack of memory release after an effective lifetime. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

The vulnerability of the si_parse_power_table() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the siparsepowertable function in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the xgene_hwmon_probe() function in the drivers/hwmon/xgene-hwmon.c module of the Linux operating system’s hardware monitoring driver allows a malicious actor to cause a service failure.

The vulnerability of the xgenehwmonprobe function in the drivers/hwmon/xgene-hwmon.c module of the Linux device monitoring driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260205-73-0035

A vulnerability in the hashaccept function of the crypto/algifhash.c component of the Linux kernel is related to memory re-release. Exploitation of the vulnerability may allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service...

CVE-2026-23096

In the Linux kernel, the following vulnerability has been resolved: uacce: fix cdev handling in the cleanup path When cdevdeviceadd fails, it internally releases the cdev memory, and if cdevdevicedel is then executed, it will cause a hang error. To fix it, we check the return value of cdevdevicea...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the xmllint interactive shell when repeatedly providing whitespace-only input. An attacker can exhaust system memory and cause process termination by continuously submitting such...

libxml2 安全漏洞

Libxml2 is an open-source library from GNOME that is used for parsing XML documents. It is written in C language and can be called in various languages, such as C, C++, and XSH. Libxml2 has a security vulnerability, which stems from improper memory release in interactive shells, potentially leadi...