CVE-2022-49190

In the Linux kernel, the following vulnerability has been resolved: kernel/resource: fix kfree of bootmem memory again Since commit ebff7d8f270d "mem hotunplug: fix kfree of bootmem memory", we could get a resource allocated during boot via allocresource. And it's required to release the resource...

CVE-2022-49653 i2c: piix4: Fix a memory leak in the EFCH MMIO support

In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix a memory leak in the EFCH MMIO support The recently added support for EFCH MMIO regions introduced a memory leak in that code path. The leak is caused by the fact that releaseresource merely removes the resource...

CVE-2022-49513

In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: Use kobject release method to free dbsdata The struct dbsdata embeds a struct govattrset and the struct govattrset embeds a kobject. Since every kobject must have a release method and we can't use kfree to free...

CVE-2025-0235

Out-of-bounds vulnerability due to improper memory release during image rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic LIPSLX V4 Printer Driver...

CVE-2025-0235

CVE-2025-0235 is an out-of-bounds vulnerability caused by improper memory release during image rendering in Canon printer drivers: Generic PCL6 V4 Printer Driver, Generic UFR II V4 Printer Driver, and Generic LIPSLX V4 Printer Driver. The connected sources corroborate the same root cause across t...

CVE-2025-0235

Out-of-bounds vulnerability due to improper memory release during image rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic LIPSLX V4 Printer Driver...

CVE-2025-0235: Out-of-bounds Write

Out-of-bounds vulnerability due to improper memory release during image rendering in Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic LIPSLX V4 Printer Driver...

The vulnerability of the dev_kfree_skb_any() function (drivers/net/ethernet/google/gve/gve_rx_dqo.c) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the devkfreeskbany function drivers/net/ethernet/google/gve/gverxdqo.c in the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from the resource management module not properly handling the release of boot memory, which could lead to a memory...

LSN-0109-1 Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: tls: fix use-after-free on failed backlog decryption When the decrypt request goes to the backlog and cryptoaeaddecrypt returns -EBUSY, tlsdodecryption will wait until all async decryptions have completed. If one of them fails,...

The vulnerability of the Linux operating system’s kernel components, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel components is related to the lack of memory release after the effective lifespan of components. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20250212-13

Vulnerability in the ntpd daemon implementation of the NTP time synchronization protocol is related to insufficient validation of user input during NTP packet processing. user input during NTP packet processing. Exploitation of the vulnerability could allow an attacker acting remotely to cause a...

Security update for gnutls

This update for gnutls fixes the following issues: CVE-2024-28835: certtool crash when verifying a certificate chain bsc1221747 CVE-2024-28834: Fixed side-channel in the deterministic ECDSA bsc1221746 jitterentropy: Release the memory of the entropy collector when using jitterentropy with phtread...

The vulnerability of Xen hypervisors, related to the lack of memory release after the effective lifespan, allows a malicious actor to gain access to confidential information.

The vulnerability of Xen hypervisors is related to data leaks in the libxl library, as well as the lack of memory release after the effective lifespan of the components. Exploiting this vulnerability can allow an attacker to access confidential information...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from memory reuse after release...

Security Bulletin: Vulnerability in linux affects IBM Integrated Analytics System [CVE-2024-39490]

Summary Redhat provided linux is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2024-39490 Vulnerability Details CVEID:CVE-2024-39490 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix missi...

The vulnerability of the driver_register() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the driverregister function in the Linux operating system’s kernel is related to improper memory release before deleting the last pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `fs/fuse/virtio_fs.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/fuse/virtiofs.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to the repeated release of memory, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the net/vmw_vsock/virtio_transport_common.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/vmwvsock/virtiotransportcommon.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...