CVE-2025-40274

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Remove bindings on memslot deletion when gmem is dying When unbinding a memslot from a guestmemfd instance, remove the bindings even if the guestmemfd file is dying, i.e. even if its file refcount has gone to zer...

The vulnerability of the `rpcrdma_remove_one()` function in the `net/sunrpc/xprtrdma/ib_client.c` module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the rpcrdmaremoveone function in the net/sunrpc/xprtrdma/ibclient.c module of the Linux operating system’s RPC protocol implementation is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cau...

Vulnerability of the btrfs_add_qgroup_relation() function (fs/btrfs/qgroup.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the btrfsaddqgrouprelation function fs/btrfs/qgroup.c in the Linux kernel is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function ath12k_core_qmi_firmware_ready() in the drivers/net/wireless/ath/ath12k/core.c file of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the ath12kcoreqmifirmwareready function in the drivers/net/wireless/ath/ath12k/core.c file of the Linux kernel is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gmc_v10_0_hw_fini() function in the drivers/gpu/drm/amd/amdgpu/gmc_v10_0.c driver module allows a hacker to cause a service failure in AMD GPU-based Linux operating system Direct Rendering Infrastructure (DRI).

The vulnerability of the gmcv100hwfini function in the drivers/gpu/drm/amd/amdgpu/gmcv100.c driver module relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the hfi1_ipoib_tx_timeout() function in the drivers/infiniband/hw/hfi1/ipoib_tx.c module of the Linux operating system’s InfiniBand driver allows a hacker to gain access to protected information.

The vulnerability of the hfi1ipoibtxtimeout function in the drivers/infiniband/hw/hfi1/ipoibtx.c module of the Linux operating system’s InfiniBand driver lies in the absence of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to gain...

The vulnerability of the nixge_hw_dma_bd_release() function in the drivers/net/ethernet/ni/nixge.c module of the Linux operating system’s network adapter support driver allows a hacker to cause a service failure.

The vulnerability of the nixgehwdmabdrelease function in the drivers/net/ethernet/ni/nixge.c module of the Linux operating system’s network adapter support driver lies in the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gss_import_v2_context() function in the net/sunrpc/auth_gss/gss_krb5_mech.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the gssimportv2context function in the net/sunrpc/authgss/gsskrb5mech.c module of the Linux kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SIMATIC S7-1500 Missing Release of Memory after Effective Lifetime (CVE-2024-56644)

In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6negativeadvice when this function is executed for an expired IPv6 route located in the exception table. This plugin only works with Tenable.ot...

Siemens SIMATIC S7-1500 Missing Release of Memory after Effective Lifetime (CVE-2024-56779)

nfsd: fix nfs4openowner leak when concurrent nfsd4open occur The action force umountumount -f will attempt to kill all rpctask even umount operation may ultimately fail if some files remain open. Consequently, if an action attempts to open a file, it can potentially send two rpctask to nfs server...

The vulnerability of the drm_test_check_broadcast_rgb_auto_cea_mode_vic_1() function in the drivers/gpu/drm/tests/drm_hdmi_state_helper_test.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the drmtestcheckbroadcastrgbautoceamodevic1 function in the drivers/gpu/drm/tests/drmhdmistatehelpertest.c module of the Linux kernel is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to caus...

Advisory ROSA-SA-2025-3072

Software: libwebp 1.0.0 OS: ROSA Virtualization 3.0 unaffected versions = libwebp-1.0.0.0-10.0.1.rv30 affected versions libwebp-1.0.0.0-10.0.1.rv30 CVE-ID: CVE-2020-36332 BDU-ID: CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the libwebp library for WebP image encoding and decoding is associated...

The vulnerability of the bpf_parse_param() function in the kernel/bpf/inode.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bpfparseparam function in the kernel/bpf/inode.c module of the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dbitmap_free() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dbitmapfree function in the Linux operating system’s kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the mlx5e_tc_hairpin_update_dead_peer() function in the drivers/net/ethernet/mellanox/mlx5/core/en_tc.c file – a driver for supporting Mellanox Ethernet network adapters in Linux operating systems, which allows a hacker to cause a service failure.

Vulnerability of the mlx5etchairpinupdatedeadpeer function in the drivers/net/ethernet/mellanox/mlx5/core/entc.c file – The Mellanox Ethernet network adapter driver for Linux operating systems is vulnerable due to the lack of memory release after the effective lifespan of the driver. Exploiting...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989391 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix wrong reg type conversion in releasereference Some helper functions will allocate memory...

Astra Linux – Vulnerability in Apache2

Delayed memory release after the effective lifetime vulnerability in the Apache HTTP Server. This issue affects the Apache HTTP Server: from version 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes this issue...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: The issue of a refcount leak causing resources not being released has been fixed. When ksmbdconnreleasingopinfo-conn returns true, the refcount was not decremented properly, resulting in a refcount leak. This prevents the...

The vulnerability of the user_cluster_connect() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the userclusterconnect function in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Missing Release of Memory after Effective Lifetime (CVE-2024-44944)

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nfexpectgetid helper function to calculate the expectation ID, otherwise LSB of the expectation object address is...