The vulnerability of the isofs_fill_super() function in the fs/isofs/inode.c module of the Linux kernel’s file system support module allows a attacker to cause a service failure.

The vulnerability of the isofsfillsuper function in the fs/isofs/inode.c module of the Linux kernel’s file system support mechanism is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ufshcd_pltfrm_remove() function in the drivers/ufs/host/ufshcd-pltfrm.c module, which is part of the UFS host controller support in Linux operating systems, allows a malicious actor to cause a service failure.

The vulnerability of the ufshcdpltfrmremove function in the drivers/ufs/host/ufshcd-pltfrm.c module affects UFS-host controllers. In Linux operating systems, this vulnerability is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow...

Vulnerability of the mlx5vf_add_migration_pages() function in the drivers/vfio/pci/mlx5/cmd.c module – A driver for VFIO-enabled devices in the Linux operating system, which allows a hacker to cause a service failure

Vulnerability of the mlx5vfaddmigrationpages function in the drivers/vfio/pci/mlx5/cmd.c module – VFIO device drivers for Linux operating systems are vulnerable due to the lack of memory release after the effective lifespan. Exploiting this vulnerability can allow an attacker to cause service...

EUVD-2025-201581

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Remove bindings on memslot deletion when gmem is dying When unbinding a memslot from a guestmemfd instance, remove the bindings even if the guestmemfd file is dying, i.e. even if its file refcount has gone to zer...

DEBIAN-CVE-2025-40268

In the Linux kernel, the following vulnerability has been resolved: cifs: client: fix memory leak in smb3fscontextparseparam The user calls fsconfig twice, but when the program exits, free only frees ctx-source for the second fsconfig, not the first. Regarding fc-source, there is no code in the f...

UBUNTU-CVE-2025-40268

In the Linux kernel, the following vulnerability has been resolved: cifs: client: fix memory leak in smb3fscontextparseparam The user calls fsconfig twice, but when the program exits, free only frees ctx-source for the second fsconfig, not the first. Regarding fc-source, there is no code in the f...

CVE-2025-40274

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Remove bindings on memslot deletion when gmem is dying When unbinding a memslot from a guestmemfd instance, remove the bindings even if the guestmemfd file is dying, i.e. even if its file refcount has gone to zer...

The vulnerability of the `rpcrdma_remove_one()` function in the `net/sunrpc/xprtrdma/ib_client.c` module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the rpcrdmaremoveone function in the net/sunrpc/xprtrdma/ibclient.c module of the Linux operating system’s RPC protocol implementation is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cau...

Vulnerability of the btrfs_add_qgroup_relation() function (fs/btrfs/qgroup.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the btrfsaddqgrouprelation function fs/btrfs/qgroup.c in the Linux kernel is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function ath12k_core_qmi_firmware_ready() in the drivers/net/wireless/ath/ath12k/core.c file of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the ath12kcoreqmifirmwareready function in the drivers/net/wireless/ath/ath12k/core.c file of the Linux kernel is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gmc_v10_0_hw_fini() function in the drivers/gpu/drm/amd/amdgpu/gmc_v10_0.c driver module allows a hacker to cause a service failure in AMD GPU-based Linux operating system Direct Rendering Infrastructure (DRI).

The vulnerability of the gmcv100hwfini function in the drivers/gpu/drm/amd/amdgpu/gmcv100.c driver module relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the hfi1_ipoib_tx_timeout() function in the drivers/infiniband/hw/hfi1/ipoib_tx.c module of the Linux operating system’s InfiniBand driver allows a hacker to gain access to protected information.

The vulnerability of the hfi1ipoibtxtimeout function in the drivers/infiniband/hw/hfi1/ipoibtx.c module of the Linux operating system’s InfiniBand driver lies in the absence of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to gain...

The vulnerability of the gss_import_v2_context() function in the net/sunrpc/auth_gss/gss_krb5_mech.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the gssimportv2context function in the net/sunrpc/authgss/gsskrb5mech.c module of the Linux kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nixge_hw_dma_bd_release() function in the drivers/net/ethernet/ni/nixge.c module of the Linux operating system’s network adapter support driver allows a hacker to cause a service failure.

The vulnerability of the nixgehwdmabdrelease function in the drivers/net/ethernet/ni/nixge.c module of the Linux operating system’s network adapter support driver lies in the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SIMATIC S7-1500 Missing Release of Memory after Effective Lifetime (CVE-2024-56644)

In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6negativeadvice when this function is executed for an expired IPv6 route located in the exception table. This plugin only works with Tenable.ot...

Siemens SIMATIC S7-1500 Missing Release of Memory after Effective Lifetime (CVE-2024-56779)

nfsd: fix nfs4openowner leak when concurrent nfsd4open occur The action force umountumount -f will attempt to kill all rpctask even umount operation may ultimately fail if some files remain open. Consequently, if an action attempts to open a file, it can potentially send two rpctask to nfs server...

The vulnerability of the drm_test_check_broadcast_rgb_auto_cea_mode_vic_1() function in the drivers/gpu/drm/tests/drm_hdmi_state_helper_test.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the drmtestcheckbroadcastrgbautoceamodevic1 function in the drivers/gpu/drm/tests/drmhdmistatehelpertest.c module of the Linux kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to caus...

Advisory ROSA-SA-2025-3072

Software: libwebp 1.0.0 OS: ROSA Virtualization 3.0 unaffected versions = libwebp-1.0.0.0-10.0.1.rv30 affected versions libwebp-1.0.0.0-10.0.1.rv30 CVE-ID: CVE-2020-36332 BDU-ID: CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the libwebp library for WebP image encoding and decoding is associated...

The vulnerability of the bpf_parse_param() function in the kernel/bpf/inode.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bpfparseparam function in the kernel/bpf/inode.c module of the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dbitmap_free() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dbitmapfree function in the Linux operating system’s kernel is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...