1036 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-40144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvdimm: ndtest: Return -ENOMEM if devmkcalloc fails in ndtestprobe devmkcalloc may fail. ndtestprobe allocates three DMA address arrays dcrdma, labeldma, dimmdm...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990760)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990760 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix null pointer dereferencing in pinctrldttomap Here is the BUG report by...
CVE-2025-27917
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory...
EUVD-2025-38151
An issue was discovered in AnyDesk through 9.0.4. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory allocation and a NULL pointer dereference...
AnyDesk 代码问题漏洞
AnyDesk is a remote desktop connection software from AnyDesk Germany. A security vulnerability exists in AnyDesk 9.0.4 and earlier versions, which stems from improper deserialization leading to memory allocation failure and null pointer dereferencing, which could lead to a remote denial of servic...
PT-2025-45345
Name of the Vulnerable Software and Affected Versions AnyDesk versions through 9.0.4 Description A remote denial of service can occur due to incorrect deserialization, leading to failed memory allocation and a NULL pointer dereference. Recommendations Update AnyDesk to a version later than 9.0.4...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989455)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989455 advisory. In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pciprobe devmkasprintf returns NULL when memory allocation fail...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988786)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988786 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/slub: fix to return errno if kmalloc fails In createuniqueid, kmalloc, GFPKERNEL can fail due...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: fbdev: imxfb: Check fbaddvideomode to prevent nullptrderef. The fbaddvideomode function may fail with -ENOMEM if its internal kmalloc function cannot allocate a struct fbmodelist. In such cases, the modelist remains empty, but th...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: A NULL check has been added in raspberrypiclkregister. devmkasprintf returns NULL when memory allocation fails. Currently, raspberrypiclkregister does not check for this case, which results in a NULL pointer being...
Astra Linux - уязвимость в libxml2
libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE ID ... because an attacker typically can't control when...
SUSE CVE-2022-50569
In the Linux kernel, the following vulnerability has been resolved: xfrm: Update ipcompscratches with NULL when freed Currently if ipcompallocscratches fails to allocate memory ipcompscratches holds obsolete address. So when we try to free the percpu scratches using ipcompfreescratches it tries t...
JLSEC-2025-187 Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware...
Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays...
CVE-2023-53698
In the Linux kernel, the xsk refcount underflow vulnerability was fixed in the error path when xp_alloc_tx_descs() fails due to memory exhaustion. The bug occurred because the pool’s refcount was decremented after being incremented, but xs->pool in the socket was not nulled. As a result, on so...
CVE-2023-53698 xsk: fix refcount underflow in error path
In the Linux kernel, the following vulnerability has been resolved: xsk: fix refcount underflow in error path Fix a refcount underflow problem reported by syzbot that can happen when a system is running out of memory. If xpalloctxdescs fails, and it can only fail due to not having enough memory,...
CVE-2023-53698 xsk: fix refcount underflow in error path
In the Linux kernel, the following vulnerability has been resolved: xsk: fix refcount underflow in error path Fix a refcount underflow problem reported by syzbot that can happen when a system is running out of memory. If xpalloctxdescs fails, and it can only fail due to not having enough memory,...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987603)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987603 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM Do not call snddmafreepages when...
EUVD-2025-31831
A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/savecustomer.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has...