Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incomplete PTP resource cleanup during ice driver removal, which could lead to resource release issues...

Security Bulletin: IBM® Db2® is vulnerable to denial of service when running federated queries with the certain condition (CVE-2025-36071)

Summary IBM® Db2® is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted federated query due to improper release of memory resources. Vulnerability Details CVEID:CVE-2025-36071 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes DB2...

Vulnerability of the psb_gem_free_object() function in the drivers/gpu/drm/gma500/gem.c module – This driver is part of the Linux kernel’s Direct Rendering Infrastructure (DRI) support. It allows a malicious actor to cause a service failure.

Vulnerability of the psbgemfreeobject function in the drivers/gpu/drm/gma500/gem.c module – The Linux kernel’s DRI support driver has a vulnerability related to improper resource release. Exploiting this vulnerability could allow an attacker to cause service failures...

Vulnerability of the mlx5vf_add_migration_pages() function in the drivers/vfio/pci/mlx5/cmd.c module – A driver for VFIO-enabled devices in the Linux operating system, which allows a hacker to cause a service failure

Vulnerability of the mlx5vfaddmigrationpages function in the drivers/vfio/pci/mlx5/cmd.c module – VFIO device drivers for Linux operating systems are vulnerable due to the lack of memory release after the effective lifespan. Exploiting this vulnerability can allow an attacker to cause service...

Security Bulletin: Vulnerabilities in Eclipse affect Tivoli Netcool/OMNIbus. (CVE-2024-13009, CVE-2024-47554)

Summary There are vulnerabilities in the MIB Manager application that is part of Tivoli Netcool/OMNIbus. Vulnerability Details CVEID:CVE-2024-13009 DESCRIPTION: In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a reques...

CVE-2025-13524

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require...

CVE-2025-36006 IBM Db2 denial of service

IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial due to the improper release of resources after use...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a double release issue in the userclusterconnect function...

Siemens SIMATIC Devices Missing Release of Memory after Effective Lifetime (CVE-2024-35978)

Bluetooth: Fix memory leak in hcireqsynccomplete This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503414; scriptversion"1.2";...

EUVD-2018-1045

Malware in sbrugna...

EUVD-2021-29492

Malicious code in bioql PyPI...

EUVD-2025-13102

Malicious code in bioql PyPI...

EUVD-2025-10050

Malicious code in bioql PyPI...

EUVD-2024-53832

Malicious code in bioql PyPI...

UBUNTU-CVE-2022-50247

In the Linux kernel, the following vulnerability has been resolved: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq Can not set the @sharedhcd to NULL before decrease the usage count by usbputhcd, this will cause the shared hcd not released...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a double release issue with the tx path in the iwlwifi driver, which could cause the kernel to crash or lock...

CVE-2025-58374 Roo Code: Auto-approve allows npm install execution of malicious postinstall scripts

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a default list of allowed commands that do not need manual approval if auto-approve is enabled, and npm install is included in that list. Because npm install executes lifecycle...

CBL Mariner 2.0 Security Update: httpd (CVE-2025-53020)

The version of httpd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-53020 advisory. - Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apach...

Apache 2.4.x < 2.4.64 Multiple Vulnerabilities

According to its banner, the version of Apache running on the remote host is 2.4.x prior to 2.4.64. It is, therefore, affected by multiple vulnerabilities: - HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of...

ALPINE-CVE-2025-53020

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes the issue...