Advisory ROSA-SA-2026-3128

software: gnutls 3.8.10 OS: ROSA-CHROME unaffected versions = gnutls-3.8.10-1 affected versions gnutls-3.8.10-1 CVE-ID: CVE-2025-32988 BDU-ID: 2025-11076 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the asn1deletestructure function of the GnuTLS transport layer security library involves a memory...

ROS-20260112-7335

A vulnerability in the sqpoll component of the Linux operating system is related to a memory release error. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the presence of a memory corruption in the extended buffer descriptor mode, which could result in a DMA memory...

Linux kernel arm64/entry DoS

The vulnerability of the arm64/entry component in the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

Linux kernel btrfs_add_qgroup_relation Heap Buffer Overflow DoS

The vulnerability of the btrfsaddqgrouprelation function fs/btrfs/qgroup.c in the Linux kernel is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988884)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988884 advisory. In the Linux kernel, the following vulnerability has been resolved: brcmfmac: pcie: Release firmwares in the brcmfpciesetup error path This avoids leaking memory if...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from old bitmap releases not being handled correctly when dbitmapgrow fails, which could lead to a double release...

CVE-2025-39976: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: futex: Use correct exit on failure from futexhashallocatedefault copyprocess uses the wrong error exit path from futexhashallocatedefault. After exiting from futexhashallocatedefault, neither tasklistlock nor siglock has been...

FFmpeg Frame Buffer Overflow DoS

The vulnerability in the vframealloc function of the frame.c component of the FFmpeg multimedia library relates to improper memory release before deleting the last reference. Exploiting this vulnerability allows an attacker to cause service failure...

FFmpeg Heap Buffer Overflow DoS

The vulnerability of the inaviaddientry function in the FFmpeg multimedia library is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

EUVD-2024-53185

Malicious code in bioql PyPI...

EUVD-2022-55088

Malicious code in bioql PyPI...

Linux kernel Resource Release DoS

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux kernel Wi-Fi DoS

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

ksmbd DoS

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux wcd937x_soc_codec_probe Heap Buffer Overflow DoS

The vulnerability of the wcd937xsoccodecprobe function in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel seccomp Buffer Overflow DoS

The vulnerability of the kernel/seccomp.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux drivers/net/ethernet/broadcom/bnxt DoS

The vulnerability of the drivers/net/ethernet/broadcom/bnxt component in Linux operating systems is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux drivers/media/i2c/ds90ub913.c DoS

The vulnerability of the “drivers/media/i2c/ds90ub913.c” component of the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Component DoS

The vulnerability in the drivers/media/pci/intel/ipu6/ipu6-isys.c component of the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...