170 matches found
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992268)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992268 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Deallocate EPC memory on dwpcieepinit errors If dwpcieepinit fails to perform any actio...
CVE-2022-50721
CVE-2022-50721 affects the Linux kernel via the dmaengine: qcom-adm module. The vulnerability stems from the function prep_slave_sg returning an error pointer on error instead of NULL, while consumers (e.g., nandc) expect NULL to indicate failure. This mismatch can lead to a kernel panic later in...
CVE-2025-68220
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: netcp: Standardize knavdmaopenchannel to return NULL on error Make knavdmaopenchannel consistently return NULL on error instead of ERRPTR. Currently the header include/linux/soc/ti/knavdma.h returns NULL when t...
CVE-2022-50670
In CVE-2022-50670, the Linux kernel mmc_add_host() return value was not checked, risking memory leak from mmc_alloc_host() and a crash in device_del() when remove() runs before add. Connected documents (Astra Linux, Unity/OSS advisories) confirm the issue and its fix: check the return value and b...
Siemens SIMATIC S7-1500 Use of Incorrectly-Resolved Name or Reference (CVE-2022-27778)
A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when --no-clobber is used together with --remove-on-error. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...
kernel: PCI: Fix NULL dereference in SR-IOV VF creation error path
In the Linux kernel, the following vulnerability has been resolved: PCI: Fix NULL dereference in SR-IOV VF creation error path Clean up when virtfn setup fails to prevent NULL pointer dereference during device removal. The kernel oops below occurred due to incorrect error handling flow when...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990004)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990004 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 usb: musb: musbdsps: requestirq aft...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989268)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989268 advisory. In the Linux kernel, the following vulnerability has been resolved: net: macvlan: fix memory leaks of macvlancommonnewlink kmemleak reports memory leaks in...
CVE-2025-40107 can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
In the Linux kernel, the following vulnerability has been resolved: can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled This issue is similar to the vulnerability in the mcp251x driver, which was fixed in commit 03c427147b2d "can: mcp251x: fix resume fr...
CVE-2025-40107
Technical details about CVE-2025-40107 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are specified here. Monitor for official advisories for confirmation and remediation guidance.
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: tls: Handle the situation where data disappears from the TLS ULP. TLS assumes that it owns the receive queue of the TCP socket. This assumption cannot be guaranteed if the reader of the TCP socket entered before the TLS ULP was...
CVE-2023-53704
In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mp: improve error handling in imx8mpclocksprobe Replace ofiomap and kzalloc with devmofiomap and devmkzalloc which can automatically release the related memory when the device or driver is removed or unloaded to...
JLSEC-2025-36 libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string
libcurl's ASN1 parser has this utf8asn1str function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also invokes free on a 4 byte localstack buffer. Most modern malloc implementations detect this error and immediately abort...
CVE-2025-39956 igc: don't fail igc_probe() on LED setup error
In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igcprobe on LED setup error When igcledsetup fails, igcprobe fails and triggers kernel panic in freenetdev since unregisternetdev is not called. 1 This behavior can be tested using fault-injection framework,...
EUVD-2025-31858
A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...
UBUNTU-CVE-2022-50544
In the Linux kernel, the following vulnerability has been resolved: usb: host: xhci: Fix potential memory leak in xhciallocstreaminfo xhciallocstreaminfo allocates stream context array for streaminfo -streamctxarray with xhciallocstreamctx. When some error occurs, streaminfo-streamctxarray is not...
CVE-2022-50544
In CVE-2022-50544, the Linux kernel USB host xHCI code (xhci_alloc_stream_info) allocates a stream_ctx_array via xhci_alloc_stream_ctx and fails to free stream_info->stream_ctx_array on certain error paths, causing a memory leak. The documented fix releases stream_info->stream_ctx_array wit...
EUVD-2025-29375
Malicious code in bioql PyPI...