7226 matches found
PT-2026-37492
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hid-pl component where errors during initialization are not properly reported. This failure to handle probe errors can lead to a NULL pointer dereference the first...
kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...
kernel: ALSA: bcd2000: Fix a UAF bug on the error path of probing
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture Behringer BCD2000 driver. A local user could exploit this vulnerability to achieve privilege escalation or cause a Denial of Service DoS by crashing the system. This issue occurs when device initialization fails during...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56576)
media: i2c: tc358743: crash in the probe error path when using polling. If an error occurs in the probe function, the polling timer that was alarmed earlier should be removed, otherwise the timer is called with arguments that are already freed, which results in a crash. This plugin only works wit...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56574)
media: ts2020: null-ptr-deref in ts2020probe. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504729; scriptversion"1.4";...
Siemens SCALANCE and RUGGEDCOM Devices Double Free (CVE-2024-46673)
scsi: aacraid: Fix double-free on probe failure. aacprobeone calls hardware-specific init functions through the aacdriverident::init pointer, all of which eventually call down to aacinitadapter. If aacinitadapter fails after allocating memory for aacdev::queues, it frees the memory but does not...
Linux kernel Ethernet driver Heap Buffer Overflow DoS
The vulnerability of the iceprobe function in the drivers/net/ethernet/intel/ice/icemain.c file of the Linux kernel’s Ethernet network adapter support module exposes a memory leak after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to caus...
Linux kernel Thermal Probe Heap Buffer Overflow DoS
The vulnerability of the loongson2thermalprobe function in the drivers/thermal/loongson2thermal.c file of the Linux kernel temperature control driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
SUSE CVE-2025-40156
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error pointer dereference. Use ISERRORNULL to check that the pointer is vali...
SUSE CVE-2025-40177
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix bootlog initialization ordering As soon as we queue MHI buffers to receive the bootlog from the device, we could be receiving data. Therefore all the resources needed to process that data need to be setup prior to...
Linux kernel PHY support driver Heap Buffer Overflow DoS
Vulnerability of the qmpusbcprobe function in the drivers/phy/qualcomm/phy-qcom-qmp-usbc.c module – The Linux kernel’s PHY support driver relies on pointer swapping. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-40156
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe The drv-sramreg pointer could be set to ERRPTR-EPROBEDEFER which would lead to a error pointer dereference. Use ISERRORNULL to check that the pointer is vali...
CVE-2025-11367
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-40177
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix bootlog initialization ordering As soon as we queue MHI buffers to receive the bootlog from the device, we could be receiving data. Therefore all the resources needed to process that data need to be setup prior to...
CVE-2025-40116
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthreadrun function returns error pointers so the max3421hcd-spithread pointer can be either error pointers or NULL. Check for both before dereferencing i...
SUSE CVE-2025-40116
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthreadrun function returns error pointers so the max3421hcd-spithread pointer can be either error pointers or NULL. Check for both before dereferencing i...
EUVD-2025-131912
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
CVE-2025-11367
The N-central Software Probe 2025.4 is vulnerable to Remote Code Execution via deserialization...
