CVE-2024-52318

CVE-2024-52318 🚨🚨CVE-2024-52318 - Vulnerabilità XSS in JSP Generate in Apache Tomcat🚨🚨 Panoramica CVE-2024-52318 è una vulnerabilità di cross-site scripting XSS in Apache Tomcat, che deriva dal rilascio improprio di risorse nelle JavaServer Pages JSP generate. Questo problema, introdotto da un...

The vulnerability of the xe_nvm_init() function in the drivers/gpu/drm/xe/xe_nvm.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the xenvminit function in the drivers/gpu/drm/xe/xenvm.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the ip6_datagram_send_ctl() function in the net/ipv6/datagram.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ip6datagramsendctl function in the net/ipv6/datagram.c module of the IPv6 protocol implementation in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-74721

A flaw was found in the Linux kernel's accel/amxdna component. Specifically, an error in the amdxdnainsertpages function causes system resources to be released too early. This premature release can lead to a critical error when the system later attempts to free the same resources, resulting in a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: caam – Fixed the pointer passed to caamqishutdown. The type of the last parameter given to devmaddactionorreset is "struct caamdrvprivate ", but in caamqishutdown, it is casted to "struct device ". Pass the correct...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: gpiolib: A memory leak was fixed in gpiochipsetupdev. Here is a backtrace report regarding the memory leak detected in gpiochipsetupdev: Unreferenced object: 0xffff88810b406400 size 512 - Source: comm "python3", pid 1682, jiffies...

The vulnerability in the soup-server-connection.c component of the LibSoup access library allows a attacker to cause a service failure.

The vulnerability of the soup-server-connection.c component in the LibSoup access library is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the check_swap_activate() function in the fs/f2fs/data.c file of the F2FS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkswapactivate function in the fs/f2fs/data.c file of the Linux operating system’s F2FS kernel relates to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the cs42l43pinprobe() function in the drivers/pinctrl/cirrus/pinctrl-cs42l43.c driver for Linux kernel’s PINCTRL output ports allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cs42l43pinprobe function in the drivers/pinctrl/cirrus/pinctrl-cs42l43.c driver for Linux kernel’s PINCTRL output port relates to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the hyperv.netvsc_drv.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the hyperv.netvscdrv.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel Bluetooth module, allowing a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Bluetooth module is related to premature resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dma/at_hdmac.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dma/athdmac.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/base/regmap/regmap-slimbus.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/base/regmap/regmap-slimbus.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-68091 HID: wacom: stop hardware after post-start probe failures

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacomparseandregister starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release...

CVE-2026-68091

CVE-2026-68091 concerns the Linux kernel HID Wacom driver. In wacom_parse_and_register(), HID hardware is started before inputs and LED/remotes are initialized. If subsequent steps fail, the error path currently releases Wacom resources without stopping the HID hardware, potentially causing syste...

EUVD-2026-55272

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacomparseandregister starts HID hardware before registering inputs and initializing pad LEDs/remotes. Those later steps can fail, but their error paths currently release...

The vulnerability of the damon_sysfs_scheme_add_dirs() function in the mm/damon/sysfs-schemes.c module, a memory-management subsystem of the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the damonsysfsschemeadddirs function in the mm/damon/sysfs-schemes.c module, a memory management subsystem of the Linux operating system, is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the damon_sysfs_context_add_dirs() function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the damonsysfscontextadddirs function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

CVE-2026-64607

HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message. Please note this defect does not affect HttpClient based on the async i/o...

The vulnerability of the ulpi_register_interface() function in the drivers/usb/common/ulpi.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ulpiregisterinterface function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...