37 matches found
CVE-2026-59295 Micrometer Instrumentation of Apache HttpAsyncClient Denial of Service Vulnerability
Micrometer-instrumented Apache HttpAsyncClient 4.x or 5.x usage via MicrometerHttpClientInterceptor can leak memory unboundedly when asynchronous requests fail before receiving a response e.g. connection resets or timeouts. Tracking state for these requests remains in memory indefinitely, and...
CVE-2026-72439
The CVE-2026-72439 entry documents a Linux kernel vulnerability in the md/raid10 path where a writes_pending reference is leaked when write requests fail. Root cause: raid10_make_request() grabs writes_pending via md_write_start() and some raid10_write_request() failure paths skip md_write_end(),...
CVE-2026-67313 axios 0.28.0 before 1.18.0 Denial of Service via formDataToJSON
axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply FormData with field names containing thousands of nested brackets to exhaust the JavaScript call stack and trigger...
SUSE CVE-2026-64144
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb-setuppacket leak in error paths The setuppacket of control urb is not freed if usbsubmiturb fails or the submitted urb is killed. Add free in these two paths...
CVE-2026-45869
In the Linux kernel, the following vulnerability has been resolved: power: supply: wm97xx: Fix NULL pointer dereference in powersupplychanged In probe, requestirq is called before allocating/registering a powersupply handle. If an interrupt is fired between the call to requestirq and...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: Wifi: cfg80211 – Fix for a memory leak in queryregdbfile In the function queryregdbfile, the alpha2 parameter is duplicated using kmemdup and then freed in regdbfwcb. However, requestfirmwarenowait may fail without calling...
CVE-2026-43469 xprtrdma: Decrement re_receiving on the early exit paths
In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decrement rereceiving on the early exit paths In the event that rpcrdmapostrecvs fails to create a work request due to memory allocation failure, say or otherwise exits early, we should decrement ep-rereceiving before...
PT-2026-39130
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xprtrdma component where the rpcrdma post recvs function fails to decrement the re receiving variable on early exit paths, such as during memory allocation failure...
Linux kernel 安全漏洞
The Linux kernel is a product of the Linux Foundation, as is the Linux operating system itself. Other products like “roc” are developed by individual developers. “req” is a simple Go HTTP client that uses Black Magic technology. “ClickHouse” is an open-source product; “ch” is a low-level Go clien...
EUVD-2026-5860
In the Linux kernel, the following vulnerability has been resolved: spi: tegra: Fix a memory leak in tegraslinkprobe In tegraslinkprobe, when platformgetirq fails, it directly returns from the function with an error code, which causes a memory leak. Replace it with a goto label to ensure proper...
CVE-2022-50836
The CVE-2022-50836 issue in the Linux kernel’s remoteproc: sysmon subsystem (qcom_add_sysmon_subdev) caused a memory leak. Root cause: kfree() was not invoked when of_irq_get_byname() or devm_request_threaded_irq() failed, leading to leaked memory. The fix adds a kfree() path to ensure proper cle...
net/mlx5: Clean up only new IRQ glue on request_irq() failure
...
SUSE CVE-2025-40250
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clean up only new IRQ glue on requestirq failure The mlx5irqalloc function can inadvertently free the entire rmap and end up in a crash1 when the other threads tries to access this, when requestirq fails due to exhauste...
PT-2025-49080
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mlx5 irq alloc function in the Linux kernel could inadvertently free the entire rmap, leading to a crash when request irq fails due to exhausted IRQ vectors. This issue occurs when...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989043)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989043 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in queryregdbfile In the function queryregdbfile the alpha2...
EUVD-2017-10573
Malware in sbrugna...
PT-2025-18390 · Elastic · Apm Server
Name of the Vulnerable Software and Affected Versions: Elasticsearch APM Server affected versions not specified Description: The issue concerns the potential disclosure of sensitive information in APM Server error logs. This could happen when a bulk index request partially fails, causing parts of...
Linux Distros Unpatched Vulnerability : CVE-2024-40979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: fix kernel crash during resume Currently during resume, QMI target memory is not properly handled, resulting in kernel crash in case DMA remap is...
DEBIAN-CVE-2022-49301
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in usbread8 and friends When r8712usbctrlvendorreq returns negative, 'data' in usbread8,16,32 will not be initialized. BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:643 inline BUG:...
CVE-2022-49301 staging: rtl8712: fix uninit-value in usb_read8() and friends
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8712: fix uninit-value in usbread8 and friends When r8712usbctrlvendorreq returns negative, 'data' in usbread8,16,32 will not be initialized. BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:643 inline BUG:...