Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imondisconnect Syzbot reports a KASAN issue as follows: BUG: KASAN: use-after-free in createpipe include/linux/usb.h:1945 inline BUG: KASAN: use-after-free in sendpacket+0xa2d/0xbc0...

CVE-2023-54223

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix invalid buffer access for legacy rq The below crash can be encountered when using xdpsock in rx mode for legacy rq: the buffer gets released in the XDPREDIRECT path, and then once again in the driver. This fix...

CVE-2022-50727

In the Linux kernel, the following vulnerability has been resolved: scsi: efct: Fix possible memleak in efctdeviceinit In efctdeviceinit, when efctscsiregfctransport fails, efctscsitgtdriverexit is not called to release memory for efctscsitgtdriverinit and causes memleak: unreferenced object...

CVE-2022-50780 net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed

In the Linux kernel, the following vulnerability has been resolved: net: fix UAF issue in nfqnlnfhookdrop when opsinit failed When the opsinit interface is invoked to initialize the net, but ops-init fails, data is released. However, the ptr pointer in net-gen is invalid. In this case, when...

ROS-20251223-7302

Vulnerability in ImageMagick7 related to memory re-release bug. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

ROS-20251223-7301

Vulnerability in ImageMagick related to memory re-release bug. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

The vulnerability of the `nvme_fc_delete_association()` function in the `drivers/nvme/host/fc.c` file of the NVMe over Fibre Channel driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the nvmefcdeleteassociation function in the drivers/nvme/host/fc.c file of the NVMe over Fibre Channel driver for the Linux operating system is related to multiple releases of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to cause a...

Linux Distros Unpatched Vulnerability : CVE-2022-50661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - seccomp: Move copyseccomp to no failure path. Our syzbot instance reported memory leaks in doseccomp 0, similar to the report 1. It shows that we miss freeing...

Linux Distros Unpatched Vulnerability : CVE-2023-53816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: fix potential kgdmem UAFs kgdmem pointers returned by kfdprocessdevicetranslatehandle are only guaranteed to be valid while p-mutex is held. As soon...

Linux Distros Unpatched Vulnerability : CVE-2025-40273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: free copynotify stateid in nfs4freeolstateid Typically copynotify stateid is freed either when parent's stateid is being close/freed or in nfsd4laundromat...

CVE-2025-64734

Missing Release of Resource after Effective Lifetime CWE-772 in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30...

The vulnerability of the esw_inline_mode_to_devlink() function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the eswinlinemodetodevlink function in the drivers/net/ethernet/mellanox/mlx5/core/eswitchoffloads.c file of the Mellanox Ethernet adapter support driver for Linux operating systems is related to improper release of resources. Exploiting this vulnerability could allow an...

Siemens SIMATIC S7-1500 Missing Release of Memory after Effective Lifetime (CVE-2024-56644)

In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6negativeadvice when this function is executed for an expired IPv6 route located in the exception table. This plugin only works with Tenable.ot...

net/mlx5e: SHAMPO, Fix incorrect page release

...

CVE-2023-53584 ubifs: ubifs_releasepage: Remove ubifs_assert(0) to valid this process

In the Linux kernel, the following vulnerability has been resolved: ubifs: ubifsreleasepage: Remove ubifsassert0 to valid this process There are two states for ubifs writing pages: 1. Dirty, Private 2. Not Dirty, Not Private The normal process cannot go to ubifsreleasepage which means there exist...

EUVD-2025-24111

Malicious code in bioql PyPI...

EUVD-2025-31900

Malicious code in bioql PyPI...

CVE-2025-39912 nfs/localio: restore creds before releasing pageio data

In the Linux kernel, the following vulnerability has been resolved: nfs/localio: restore creds before releasing pageio data Otherwise if the nfsd filecache code releases the nfsdfile immediately, it can trigger the BUGONcred == current-cred in putcred when it puts the nfsdfile-nffile-f-cred...

The vulnerability of the ngbe_probe() function in the drivers/net/ethernet/wangxun/ngbe/ngbe_main.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the ngbeprobe function in the drivers/net/ethernet/wangxun/ngbe/ngbemain.c file of the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from memory release not being handled correctly in dmisysfsregisterhandle, which could lead to null pointer...