1517 matches found
Vulnerability of the mlx5e_tc_hairpin_update_dead_peer() function in the drivers/net/ethernet/mellanox/mlx5/core/en_tc.c file – a driver for supporting Mellanox Ethernet network adapters in Linux operating systems, which allows a hacker to cause a service failure.
Vulnerability of the mlx5etchairpinupdatedeadpeer function in the drivers/net/ethernet/mellanox/mlx5/core/entc.c file – The Mellanox Ethernet network adapter driver for Linux operating systems is vulnerable due to the lack of memory release after the effective lifespan of the driver. Exploiting...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989391)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989391 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix wrong reg type conversion in releasereference Some helper functions will allocate memory...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: ksmbd: The issue of a refcount leak causing resources not being released has been fixed. When ksmbdconnreleasingopinfo-conn returns true, the refcount was not decremented properly, resulting in a refcount leak. This prevents the...
Astra Linux – Vulnerability in Apache2
Delayed memory release after the effective lifetime vulnerability in the Apache HTTP Server. This issue affects the Apache HTTP Server: from version 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes this issue...
The vulnerability of the user_cluster_connect() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the userclusterconnect function in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the U-Boot loader, related to the repeated release of memory, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the U-Boot loader is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures using a specially created ext4 file...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Missing Release of Memory after Effective Lifetime (CVE-2024-44944)
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nfexpectgetid helper function to calculate the expectation ID, otherwise LSB of the expectation object address is...
The vulnerability of the tcp_ao_copy_all_matching() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the tcpaocopyallmatching function in the Linux operating system is related to improper memory release after the effective lifespan has ended. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the e5010_probe function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the e5010probe function in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
Siemens SIMATIC Devices Missing Release of Memory after Effective Lifetime (CVE-2024-58063)
wifi: rtlwifi: fix memory leaks and invalid access at probe error path This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503591; scriptversion"1.2";...
Siemens SIMATIC Devices Missing Release of Memory after Effective Lifetime (CVE-2024-39493)
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADFDEVRESETSYNC memory leak Using completiondone to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called...
Siemens SIMATIC Devices Missing Release of Memory after Effective Lifetime (CVE-2024-35978)
Bluetooth: Fix memory leak in hcireqsynccomplete This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503414; scriptversion"1.2";...
SUSE CVE-2022-50562
In the Linux kernel, the following vulnerability has been resolved: tpm: acpi: Call acpiputtable to fix memory leak The start and length of the event log area are obtained from TPM2 or TCPA table, so we call acpigettable to get the ACPI information, but the acpigettable should be coupled with...
The vulnerability of the JavaScript JSS-based web application styling tool lies in the lack of memory release after the effective lifespan, allowing a malicious actor to trigger a service failure.
The vulnerability of the JavaScript JSS tool for styling web applications is related to the lack of memory release after the effective lifespan of the tool. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2023-53704
In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mp: improve error handling in imx8mpclocksprobe Replace ofiomap and kzalloc with devmofiomap and devmkzalloc which can automatically release the related memory when the device or driver is removed or unloaded to...
The vulnerability in the driver/scsi/mpt3sas/mpt3sas_base.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/scsi/mpt3sas/mpt3sasbase.c module of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the dev_set_name() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the devsetname function in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
SUSE CVE-2022-50525
In the Linux kernel, the following vulnerability has been resolved: iommu/fslpamu: Fix resource leak in fslpamuprobe The fslpamuprobe returns directly when createcsd failed, leaving irq and memories unreleased. Fix by jumping to error if createcsd returns error...
CVE-2022-50525 iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()
In the Linux kernel, the following vulnerability has been resolved: iommu/fslpamu: Fix resource leak in fslpamuprobe The fslpamuprobe returns directly when createcsd failed, leaving irq and memories unreleased. Fix by jumping to error if createcsd returns error...
