CVE-2023-53430 wifi: mt76: dma: fix memory leak running mt76_dma_tx_cleanup

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: dma: fix memory leak running mt76dmatxcleanup Fix device unregister memory leak and alway cleanup all configured rx queues in mt76dmatxcleanup routine...

CVE-2023-53430

CVE-2023-53430 affects the Linux kernel with the mt76 Wi‑Fi driver. The issue is a memory leak in the DMA cleanup path (mt76_dma_tx_cleanup) that could impact system availability. The vulnerability is resolved by fixing the device unregister memory leak and ensuring all configured RX queues are c...

CVE-2023-53430 wifi: mt76: dma: fix memory leak running mt76_dma_tx_cleanup

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: dma: fix memory leak running mt76dmatxcleanup Fix device unregister memory leak and alway cleanup all configured rx queues in mt76dmatxcleanup routine...

CVE-2023-53430 wifi: mt76: dma: fix memory leak running mt76_dma_tx_cleanup

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: dma: fix memory leak running mt76dmatxcleanup Fix device unregister memory leak and alway cleanup all configured rx queues in mt76dmatxcleanup routine...

CVE-2022-50405 net/tunnel: wait until all sk_user_data reader finish before releasing the sock

In the Linux kernel, the following vulnerability has been resolved: net/tunnel: wait until all skuserdata reader finish before releasing the sock There is a race condition in vxlan that when deleting a vxlan device during receiving packets, there is a possibility that the sock is released after...

CVE-2023-53394

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix crash on regular rq reactivation When the regular rq is reactivated after the XSK socket is closed it could be reading stale cqes which eventually corrupts the rq. This leads to no more traffic being received ...

DEBIAN-CVE-2023-53394

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix crash on regular rq reactivation When the regular rq is reactivated after the XSK socket is closed it could be reading stale cqes which eventually corrupts the rq. This leads to no more traffic being received ...

UBUNTU-CVE-2023-53394

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix crash on regular rq reactivation When the regular rq is reactivated after the XSK socket is closed it could be reading stale cqes which eventually corrupts the rq. This leads to no more traffic being received ...

CVE-2023-53394 net/mlx5e: xsk: Fix crash on regular rq reactivation

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix crash on regular rq reactivation When the regular rq is reactivated after the XSK socket is closed it could be reading stale cqes which eventually corrupts the rq. This leads to no more traffic being received ...

CVE-2023-53394 net/mlx5e: xsk: Fix crash on regular rq reactivation

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix crash on regular rq reactivation When the regular rq is reactivated after the XSK socket is closed it could be reading stale cqes which eventually corrupts the rq. This leads to no more traffic being received ...

CVE-2023-53394

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix crash on regular rq reactivation When the regular rq is reactivated after the XSK socket is closed it could be reading stale cqes which eventually corrupts the rq. This leads to no more traffic being received ...

PT-2025-40626

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the SMB client within the Linux kernel, specifically within the smbd negotiate function's error handling path. The leak occurs due to objects remaining on kmem...

PT-2025-40628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the SMB client implementation. Specifically, the smbd destroy function may attempt to access memory after it has been freed, potentially leading t...

Linux Distros Unpatched Vulnerability : CVE-2022-50265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: kcm: annotate data-races around kcm-rxwait kcm-rxpsock can be read locklessly in kcmrfree...

PT-2025-40629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's SMB client implementation. Specifically, the recv done function did not adequately verify data offset, data length, and remaining data length. This...

SUSE CVE-2022-50265

In the Linux kernel, the following vulnerability has been resolved: kcm: annotate data-races around kcm-rxwait kcm-rxpsock can be read locklessly in kcmrfree. Annotate the read and writes accordingly. syzbot reported: BUG: KCSAN: data-race in kcmrcvstrparser / kcmrfree write to 0xffff88810784e3d0...

SUSE CVE-2023-53286

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Return the firmware result upon destroying QP/RQ Previously when destroying a QP/RQ, the result of the firmware destruction function was ignored and upper layers weren't informed about the failure. Which in turn could...

curl: int overflow in krb5_read_data() leads to (possible) massive `recv()` write

Summary: Note: AI created the PoC, not the report. In the krb5readdata function here, there are two issues one of which I am very surprised hasn't been caught before. Issue 1 is that this block can result in an int overflow, where the following check becomes invalid if the value is wrapped to a...

CVE-2023-53315

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix SKB corruption in REO destination ring While running traffics for a long time, randomly an RX descriptor filled with value "0" from REO destination ring is received. This descriptor which is invalid causes the...

CVE-2025-39828 atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().

In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Prevent arbitrary write in atmtcprecvcontrol. syzbot reported the splat below. 0 When atmtcpvopen or atmtcpvclose is called via connect or close, atmtcpsendcontrol is called to send an in-kernel special message. The...