ROS-20260701-73-0014

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260701-73-0033

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

The vulnerability of the functions virtnet_freeze_down() and virtnet_restore_up() in the drivers/net/virtio_net.c module of the Linux kernel’s network device support driver allows a attacker to access protected information or cause service failures.

The vulnerability of the virtnetfreezedown and virtnetrestoreup functions in the drivers/net/virtionet.c module of the Linux kernel’s network device support driver is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to access protected...

The vulnerability of the nilfs_valid_sb() function in the fs/nilfs2/the_nilfs.c file of the NILFS2 file system in the Linux operating system allows a attacker to access protected information or cause service failure.

The vulnerability of the nilfsvalidsb function in the fs/nilfs2/thenilfs.c file of the NILFS2 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to access protected information or cause servic...

The vulnerability of the `vp_vdpa_remove()` function in the `drivers/vdpa/virtiopci/vp_vdpa.c` driver of vDPA devices in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the vpvdparemove function in the drivers/vdpa/virtiopci/vpvdpa.c file of the vDPA device driver in the Linux operating system is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause service failure...

ROS-20260629-73-0041

The vulnerability of the igbioerrordetected function in the drivers/net/ethernet/intel/igb/igbmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker...

The vulnerability of the BIND DNS server, related to resource release errors, allows a hacker to cause a service failure.

The vulnerability of the BIND DNS server is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the set_tagged_addr_ctrl() function in the arch/riscv/kernel/process.c module of the module management subsystem for the RISCV architecture-based Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the settaggedaddrctrl function in the arch/riscv/kernel/process.c module of the module for managing modules on the RISCV architecture-based Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attack...

The vulnerability of the verity_fec_decode() function in the drivers/md/dm-verity-fec.c file of the device driver for multiple Linux device types (RAID and LVM), allowing a hacker to cause a service failure.

The vulnerability of the verityfecdecode function in the drivers/md/dm-verity-fec.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the ublk_ctrl_end_recovery() function in the drivers/block/ublk_drv.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the ublkctrlendrecovery function in the drivers/block/ublkdrv.c module of the Linux kernel’s block devices driver is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

GO-2026-5190 AMF Vulnerable to Improper Resource Shutdown or Release in github.com/omec-project/amf

AMF Vulnerable to Improper Resource Shutdown or Release in github.com/omec-project/amf. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...

GO-2026-5179 AMF Vulnerable to Improper Resource Shutdown or Release in github.com/omec-project/amf

AMF Vulnerable to Improper Resource Shutdown or Release in github.com/omec-project/amf. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...

PT-2026-52252

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Use-after-free bugs exist in the error paths of the nvmem core. The issue occurs when the nvmem device put function is called, potentially freeing underlying memory and resources, while...

CVE-2026-53065

The CVE-2026-53065 issue in the Linux kernel affects ASoC: sti by leaking regmap_field allocations created during driver init. The underlying cause is that regmap_field objects were not freed, potentially exhausting resources if the driver is removed. The fixed approach switches to devm_regmap_fi...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: - SPI: ch341: fixed the device lifecycle. USB drivers bind to USB interfaces, and any device’s managed resources should have their lifecycle tied to the interface rather than the parent USB device. This prevents issues like...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Job scheduling across ai2releaseresource was stopped. Running jobs on a hardware context while it is in the process of releasing resources can lead to use-after-free errors and crashes. This issue was fixed by...

SUSE CVE-2026-46226

In the Linux kernel, the following vulnerability has been resolved: spi: fsl: fix controller deregistration Make sure to deregister the controller before releasing underlying resources like DMA during driver unbind...

The vulnerability of the dcmqrdb/libsrc/dcmqrdbi.cc component, a library for working with DICOM format data, allows attackers to cause service interruptions.

The vulnerability of the dcmqrdb/libsrc/dcmqrdbi.cc component, which is part of the DICOM processing library, is related to errors during resource release. Exploiting this vulnerability could allow an attacker to cause service failures...

AZL-88979 CVE-2026-46200 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix controller deregistration Make sure to deregister the controller before disabling and releasing underlying resources like interrupts and gpios during driver unbind...

CVE-2026-46226 spi: fsl: fix controller deregistration

In the Linux kernel, the following vulnerability has been resolved: spi: fsl: fix controller deregistration Make sure to deregister the controller before releasing underlying resources like DMA during driver unbind...