CVE-2024-21953

Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity...

CVE-2025-20070

Affected product: Intel Optane PMem management software. The issue is an improper conditions check that may allow local privilege escalation in Ring 3 for unprivileged, authenticated users. Impact includes Confidentiality, Integrity, and Availability at high level. Affects versions prior to CR_MG...

USN-8021-1 imagemagick vulnerability

Benny Isaacs discovered that ImageMagick did not properly manage memory when processing certain image files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

CVE-2026-24320

Due to improper memory management in SAP NetWeaver and ABAP Platform Application Server ABAP, an authenticated attacker could exploit logical errors in memory management by supplying specially crafted input containing unique characters, which are improperly converted. This may result in memory...

Intel Optane PMem management software 安全漏洞

Intel Optane PMem management software is a persistent memory management software developed by Intel Corporation. Previous versions of Intel Optane PMem management software, such as CRMGMT01.00.00.3584, CRMGMT02.00.00.4052, and CRMGMT03.00.00.0538, contained security vulnerabilities. These...

PT-2026-7440

Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity...

PT-2026-7286

Name of the Vulnerable Software and Affected Versions IntelR OptaneTM PMem management software versions CR MGMT 01.00.00.3584, CR MGMT 02.00.00.4052, CR MGMT 03.00.00.0538 Description The software has default permissions that may allow a privilege escalation. An unprivileged software adversary wi...

SAP NetWeaver和SAP ABAP Platform 注入漏洞

SAP NetWeaver and SAP ABAP Platform are both products of the German company SAP. SAP NetWeaver is a service-oriented integrated application platform. This platform primarily provides development and runtime environments for SAP applications. SAP ABAP Platform is an SAP solution based on ABAP. Bot...

Siemens S7-1500 Missing Release of Memory after Effective Lifetime (CVE-2025-39929)

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirectrecvio leak in smbdnegotiate error path During tests of another unrelated patch I was able to trigger this error: Objects remaining on kmemcacheshutdown This plugin only works with Tenable.ot. Please vis...

The vulnerability of the shrink_folio_list() function in the mm/vmscan.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the shrinkfoliolist function in the mm/vmscan.c file of the Linux kernel’s memory management subsystem is related to errors during linkage updates. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the __page_pool_alloc_netmems_slow() function in the net/core/page_pool.c module, which supports kernel network functions in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the pagepoolallocnetmemsslow function in the net/core/pagepool.c module, which is part of the Linux kernel’s networking functions, is related to deficiencies in error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

USN-7988-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - NVME drivers; - File systems infrastructure; - Timer subsystem; - Memory management; - Packet...

USN-7988-3 linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - NVME drivers; - File systems infrastructure; - Timer subsystem; - Memory management; - Packet...

SUSE CVE-2026-23100

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlbpmdshared Patch series "mm/hugetlb: fixes for PMD table sharing incl. using mmugather", v3. One functional fix, one performance regression fix, and two related comment fixes. I cleaned up my prototype I...

ROS-20260205-73-0029

A vulnerability in the x86/mm component of the Linux operating system kernel involves an unchecked return value. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2026-23080

In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: mcbausbreadbulkcallback: fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a "can: gsusb: gsusbreceivebulkcallback: fix URB memory leak". In mcbausbprobe - mcbausbstart, the URBs for USB-in transfe...

UBUNTU-CVE-2026-23087

In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Fix potential memory leak in scsibackremove Memory allocated for struct vscsiblkinfo in scsibackprobe is not freed in scsibackremove leading to potential memory leaks on remove, as well as in the scsibackprob...

CVE-2026-23098 netrom: fix double-free in nr_route_frame()

In the Linux kernel, the following vulnerability has been resolved: netrom: fix double-free in nrrouteframe In nrrouteframe, oldskb is immediately freed without checking if nrneigh-ax25 pointer is NULL. Therefore, if nrneigh-ax25 is NULL, the caller function will free oldskb again, causing a...

CVE-2026-23077 mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge

In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix anonvma UAF on mremap faulted, unfaulted merge Patch series "mm/vma: fix anonvma UAF on mremap faulted, unfaulted merge", v2. Commit 879bca0a2c4f "mm/vma: fix incorrectly disallowed anonymous VMA merges" introduced th...

EUVD-2026-5466

In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix anonvma UAF on mremap faulted, unfaulted merge Patch series "mm/vma: fix anonvma UAF on mremap faulted, unfaulted merge", v2. Commit 879bca0a2c4f "mm/vma: fix incorrectly disallowed anonymous VMA merges" introduced th...