CVE-2026-65970

A flaw was found in OpenImageIO, a toolset for image file manipulation. A remote attacker could exploit this vulnerability by providing a specially crafted ZIP-compressed TIFF image file. When processed with TIFF multithreading enabled, the software can prematurely release memory while background...

ROS-20260923-73-0061

The vulnerability of the gadgetBind function in the drivers/usb/gadget/legacy/rawgadget.c file of the Linux USB device driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0034

The vulnerability of the userclusterconnect function in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0082

The vulnerability of the arcserialprobe function in the drivers/tty/serial/arcuart.c file of the console TTY driver in the Linux kernel’s serial port module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0028

The vulnerability of the dallocparallel function in the fs/dcache.c module of the Linux kernel file system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0093

The vulnerability of the fastrpcPutArgs function in the drivers/misc/fastrpc.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0079

The vulnerability of the ttctimerprobe function in the drivers/clocksource/timer-cadence-ttc.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260923-73-0055

The vulnerability of the imx8mpclocksprobe function in the drivers/clk/imx/clk-imx8mp.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260921-73-0122

The vulnerability of the ipcidralloc function in the Linux operating system is related to improper memory release. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20260918-73-0059

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260918-73-0117

The vulnerability of the ipv4/foucore.c component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ROS-20260916-73-0033

The vulnerability of the nftmapelemdeactivate function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - media: cx25821: Fixed a resource leak in cx25821devsetup - Added releasememregion if ioremap fails to release the memory region obtained by cx25821getresources...

Astra Linux – Vulnerability in Parsec

The vulnerability of the pdp-id utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the pdpl-user utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Apache2

Delayed memory release after the effective lifetime vulnerability in the Apache HTTP Server. This issue affects the Apache HTTP Server: from version 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes this issue...

Astra Linux – Vulnerability in Parsec

The vulnerability of the PARSEC security subsystem is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in parsec-cups

The vulnerability of the Parsec Cups protection and marking mechanism lies in the lack of memory release after the effective lifespan of the device. Exploiting this vulnerability could allow an attacker to trigger a maintenance failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the parsecchkislocaladmin function in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the pdp-ls utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...