The vulnerability of the net/vmw_vsock/virtio_transport_common.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/vmwvsock/virtiotransportcommon.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the imgu_fmt() function in the drivers/staging/media/ipu3/ipu3-v4l2.c component of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the imgufmt function in the drivers/staging/media/ipu3/ipu3-v4l2.c component of the Linux kernel lies in improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the driver/uio/uio_hvgeneric.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/uio/uiohvgeneric.c component in Linux kernels is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Apple iOS和Apple iPadOS 资源管理错误漏洞

visionOS is an AR eyewear system announced by Apple on June 6, 2023 at the 2023 Apple Worldwide Developers Conference, which will be featured for the first time in the Apple Vision Pro. tvOS is an iOS-based television operating system developed by Apple. watchOS is a set of watch operating system...

Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management

Summary BM Storage Copy Data Management can be affected by vulnerabilities in Linux Kernel. Vulnerabilities include a remote attacker or local authenticated attacker could exploit these vulnerabilities to cause a denial of service condition as described by the CVEs in the "Vulnerability Details"...

Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a code execution vulnerability that can be exploited by an attacker to cause invalid parsing and memory release...

CVE-2024-57841 net: fix memory leak in tcp_conn_request()

In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in tcpconnrequest If inetcskreqskqueuehashadd return false, tcpconnrequest will return without free the dst memory, which allocated in afops-routereq. Here is the kmemleak stack: unreferenced object...

The vulnerability of the `nvmet_setup_dhgroup()` function in the `drivers/nvme/target/auth.c` file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nvmetsetupdhgroup function in the drivers/nvme/target/auth.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

CVE-2024-57879

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: iso: Always release hdev at the end of isolistenbis Since hcigetroute holds the device before returning, the hdev should be released with hcidevput at the end of isolistenbis even if the function returns with an error...

The vulnerability of the mse102x_tx_frame_spi() function in the Linux kernel’s drivers/net/ethernet/vertexcom/mse102x.c file allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mse102xtxframespi function in the Linux kernel’s drivers/net/ethernet/vertexcom/mse102x.c file is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `dc_state_create_copy()` function in the `drivers/gpu/drm/amd/display/dc/core/dc_state.c` file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dcstatecreatecopy function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

CVE-2025-21599

A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver jtd of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause Denial of Service. Receipt of specifically malformed IPv6 packets, destined to the device, causes...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) is related to a bug in pointer handling after memory release, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to a bug in the handling of pointers after memory release during the processing of AcroForm objects. Exploiting this...

The vulnerability of the sr component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the sr component of the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan in the seg6inputcore function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the genirq/cpuhotplug components in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the genirq/cpuhotplug components in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of these components has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of DRM/MSM components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/SMM components in the Linux operating system is related to the lack of memory release after the effective lifespan of these components. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the vlan component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the vlan component in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the component has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-53984 Nanopb does not release memory on error return when using PB_DECODE_DELIMITED

Nanopb is a small code-size Protocol Buffers implementation. When the compile time option PBENABLEMALLOC is enabled, the message contains at least one field with FTPOINTER field type, custom stream callback is used with unknown stream length. and the pbdecodeex function is used with flag...

The vulnerability of the routing protocol demon in Juniper Networks’ Junos OS and Junos OS Evolved systems allows a attacker to cause service interruptions.

The vulnerability of the routing protocol demon pdrd in Juniper Networks’ Junos OS and Junos OS Evolved systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the __free_pages function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the freepages function in the Linux operating system’s kernel is related to an error in the memory release process within the freethepage function. Exploiting this vulnerability can allow an attacker to cause a service failure...