SUSE CVE-2023-53579

In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix irq domain leak Uwe Kleine-Koenig pointed out we still have one resource leak in the mvebu driver triggered on driver detach. Let's address it with a custom devm action...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during probe, but is only removed during the driver remove. If pcihostprobe fails, the handler and INTx IRQ domain remain set even though the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled The MPCIFC instruction does not permit registering adapter interrupts without first unregistering them. Therefore, any request to enable interrupt forwarding ...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Tracing: Fix resource leak on mmiotrace tracepipe close The mmiotrace tracer was added on May 12th, 2008. At that time, resources created in pipeopen could not be freed because there was no pipeclose function pointer for the...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: ena: clean up XDP TX queues when regular TX setup fails createqueueswithsizebackoff creates XDP TX queues before setting up the regular TX path. If the subsequent allocation or creation of regular TX queues fails, the error...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in iceresetallvfs Resetting all VFs causes resource leak on VFs with FDIR filters enabled, as CTRL VSI entries are only invalidated rather than freed. The fix involves using icevfctrlvsireleas...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int3400: clean up ODVP on probe failures evaluateodvp creates per-ODVP sysfs files before the thermal zone and later probe resources are registered. Currently, the unwind path only calls cleanupodvp from the late...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: rtc: pcf8563: fix clock provider leak on unbind pcf8563clkoutregisterclk registers the CLKOUT clock provider with ofclkaddprovider, but nothing ever unwinds it: there is no ofclkdelprovider call and the driver has no remove...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in itsvpeirqdomainalloc When itsirqgicdomainalloc fails, the following itsvpeirqdomainfree fails to invoke itsvepteardown for the corresponding interrupt, resulting in a resource leak. Invoke...

LibSoup HTTP Access Information Disclosure

The vulnerability in the LibSoup library for accessing HTTP servers is related to a resource leak that occurs after the expiration of its valid usage period. Exploiting this vulnerability enables a remote attacker to gain access to protected information...

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to a resource leak that occurs after its intended usage period has expired. Exploiting this vulnerability can allow an attacker to cause a denial of service...

CVE-2026-99049

A flaw was found in the Linux kernel's Xilinx General Purpose Input/Output GPIO driver. When a pin request fails, the driver does not properly decrement the runtime power management reference counter. A local user could trigger this failure to cause a resource leak, preventing the hardware...

CVE-2026-98913

A flaw was found in the Linux kernel's Cavium ThunderX network driver. When initializing a network interface, an error occurring after acquiring a reference to the Precision Time Protocol PTP device fails to properly release that reference. A privileged local attacker could exploit this issue by...

CVE-2026-89976

A flaw was found in the Linux kernel's accel/ethosu component. This vulnerability occurs due to improper handling of job completion fences, where an uninitialized fence can be leaked or a zeroed reference count is passed to the dmafenceput function. A local attacker could potentially exploit this...

CVE-2026-89935

A flaw was found in the Linux kernel's apds9306 light sensor driver. This issue occurs because certain error paths within the apds9306readdata function fail to properly release a power management reference. This oversight leads to a resource leak, which can prevent the affected device from enteri...

CVE-2026-89936

A flaw was found in the Linux kernel's iio: dac: m62332 driver. The m62332setvalue function incorrectly manages the reference count for the Vcc regulator. When a channel's value is changed directly from one non-zero value to another, the regulator is enabled multiple times, but only disabled once...

CVE-2026-89830

A flaw was found in the f2fs Flash-Friendly File System component of the Linux kernel. When the system attempts to allocate new data blocks, it may incorrectly increment the count of valid blocks without properly reversing this action if the allocation process fails. This oversight leads to a...

Linux Distros Unpatched Vulnerability : CVE-2026-118262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy goroutines, and network connections after a...

DEBIAN-CVE-2026-118262

Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy goroutines, and network connections after a WebSocket client disconnects when the upstream keeps its connection open. The raw proxy waits for both copy directions without reliably...

UBUNTU-CVE-2026-118262

Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware can retain a handler, copy goroutines, and network connections after a WebSocket client disconnects when the upstream keeps its connection open. The raw proxy waits for both copy directions without reliably...