CVE-2025-71195

The CVE-2025-71195 entries describe a Linux kernel issue in dmaengine: xilinx: xdma where the max_register field was set to the size of the register memory region instead of the last register offset. This causes regmap reads via debugfs to segfault (segmentation fault) when inspecting /sys/kernel...

EUVD-2025-206803

In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap maxregister The maxregister field is assigned the size of the register memory region instead of the offset of the last register. The result is that reading from the regmap via debugfs can cause...

CVE-2026-23047 libceph: make calc_target() set t->paused, not just clear it

In the Linux kernel, the following vulnerability has been resolved: libceph: make calctarget set t-paused, not just clear it Currently calctarget clears t-paused if the request shouldn't be paused anymore, but doesn't ever set t-paused even though it's able to determine when the request should be...

CVE-2026-23047 libceph: make calc_target() set t->paused, not just clear it

In the Linux kernel, the following vulnerability has been resolved: libceph: make calctarget set t-paused, not just clear it Currently calctarget clears t-paused if the request shouldn't be paused anymore, but doesn't ever set t-paused even though it's able to determine when the request should be...

CVE-2026-23047

The CVE-2026-23047 issue affects the Linux kernel’s Ceph client library (libceph). The root cause is that calc_target() clears t->paused when a request should no longer be paused, but never sets it for linger requests; the intended behavior was in __submit_request(), which does not operate on ...

EUVD-2025-206806

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in sndac97controllerregister If ac97addadapter fails, putdevice is the correct way to drop the device reference. kfree is not required. Add kfree if idralloc fails and in ac97adapterrelease to do the...

CVE-2025-71192 ALSA: ac97: fix a double free in snd_ac97_controller_register()

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in sndac97controllerregister If ac97addadapter fails, putdevice is the correct way to drop the device reference. kfree is not required. Add kfree if idralloc fails and in ac97adapterrelease to do the...

CVE-2025-71192

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in sndac97controllerregister If ac97addadapter fails, putdevice is the correct way to drop the device reference. kfree is not required. Add kfree if idralloc fails and in ac97adapterrelease to do the...

CVE-2025-71192 ALSA: ac97: fix a double free in snd_ac97_controller_register()

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix a double free in sndac97controllerregister If ac97addadapter fails, putdevice is the correct way to drop the device reference. kfree is not required. Add kfree if idralloc fails and in ac97adapterrelease to do the...

openSUSE 16 Security Update : elemental-register, elemental-toolkit (openSUSE-SU-2026:20132-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20132-1 advisory. elemental-register was updated to 1.8.1: Changes on top of v1.8.1: Update headers to 2026 Update questions to include SL Micro 6.2 Update to...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an incorrect setting in the regmap maxregister field, potentially leading to segmentation violations...

The vulnerability of the __iio_device_register() function in the drivers/iio/industrialio-core.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the iiodeviceregister function in the drivers/iio/industrialio-core.c file of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Security update for elemental-register, elemental-toolkit (important)

openSUSE security update: security update for elemental-register, elemental-toolkit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20132-1 Rating: important References: bsc1241826 bsc1241857 bsc1251511 bsc1251679 bsc1253581 bsc1253901 bsc1254079...

kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-use-after-free Read in ibregisterdevice" problem Call Trace: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x116/0x1f0 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:408 inline...

CVE-2026-23033

CVE-2026-23033 concerns the Linux kernel's dmaengine/omap-dma subsystem. The issue is a resource leak where the dma_pool created by dma_pool_create() is not destroyed if dma_async_device_register() or of_dma_controller_register() fails, leaving a leak in probe error paths. The remediation in the ...

CVE-2026-23021 net: usb: pegasus: fix memory leak in update_eth_regs_async()

In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: fix memory leak in updateethregsasync When asynchronously writing to the device registers and if usbsubmiturb fail, the code fail to release allocated to this point resources...

EUVD-2020-30951

Port Forwarding Wizard 4.8.0 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code through a long request in the Register feature. Attackers can craft a malicious payload with an egg tag and overwrite SEH handlers to potentially execute shellcode on...

CVE-2020-37025

Port Forwarding Wizard 4.8.0 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code through a long request in the Register feature. Attackers can craft a malicious payload with an egg tag and overwrite SEH handlers to potentially execute shellcode on...

CVE-2020-37025

CVE-2020-37025 affects Port Forwarding Wizard 4.8.0. A buffer overflow in the Register feature lets local attackers send a long request to overwrite SEH handlers and potentially execute shellcode on vulnerable Windows systems. Descriptions indicate an egg-tag payload may be crafted to trigger the...

CVE-2020-37025 Port Forwarding Wizard 4.8.0 - Buffer Overflow

Port Forwarding Wizard 4.8.0 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code through a long request in the Register feature. Attackers can craft a malicious payload with an egg tag and overwrite SEH handlers to potentially execute shellcode on...