39518 matches found
The vulnerability in the net/tls/tls_sw.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the net/tls/tlssw.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the ext4 kernel component in Linux operating systems is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mtk-smi component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the mtk-smi component in the Linux operating system’s kernel is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-80643: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...
PT-2026-82943
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the igen6 edac driver where unloading the driver triggers a call trace. This occurs because the memory controller devices lack a release function, leading to a warning...
Linux Distros Unpatched Vulnerability : CVE-2026-80643
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it...
ROS-20260828-73-0017
The vulnerability of the VMMERGEABLE macro definition in the include/linux/mm.h module of the Linux operating system’s kernel is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
PT-2026-82998
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the dmaengine idxd component. The release callbacks idxd conf wq release, idxd conf engine release, and idxd conf group release call kfree on the enclosing...
PT-2026-86908
This update for rekor rebuilds it against the current go security release...
PT-2026-86910
This update for podman rebuilds it against the current go security release...
The vulnerability of the lasso_node_init_from_message_with_format function in the Lasso library, which stems from improper memory release before deleting the last reference, allows a hacker to trigger a service failure.
The vulnerability of the lassonodeinitfrommessagewithformat function in the Lasso library is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-82991
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iblock execute pr out function where the PRO PREEMPT, PRO PREEMPT AND ABORT, and PRO RELEASE operations perform callback capability checks via ops-pr clear. An...
Linux Distros Unpatched Vulnerability : CVE-2026-80698
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease,...
SUSE CVE-2026-72356
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifsissueread Fix missing release of credits in the failure path in cifsissueread lest retrying the subreq just overwrites the credits value...
CVE-2026-80519
A flaw was found in the Linux kernel. Specifically, within the OpenVPN OVPN module's crypto completion callback mechanism, a timing issue exists. This vulnerability arises when peer references are released prematurely, before the associated cleanup operations are complete. An attacker could...
EUVD-2026-66468
In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Cancel existing workqueues The initialization of the iowork and crwwork workqueues begs the question of whether they should be un-initialized. Add the corresponding cleanup tags in releasedev to ensure work isn't...
ROS-20260827-73-0013
The vulnerability of the mhiinitmmio function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
ROS-20260827-73-0018
The vulnerability of the rs9regmapi2cread function in the drivers/clk/clk-renesas-pcie.c file of the Linux operating system control chip for Samsung Exynos processors is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a...
ROS-20260827-73-0001
The vulnerability of the diUnmount function in the fs/jfs/jfsimap.c module of the Linux file system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
SUSE SLES15 Security Update : buildah (SUSE-SU-2026:3784-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3784-1 advisory. This update for buildah rebuilds it against the current go security release. Tenable has extracted the preceding description block directly...