ROS-20250912-17

Vulnerability in the HTTP2 handler of Apache Tomcat application server is related to incorrect release of a resource. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service...

ROS-20250910-02

A vulnerability in the Hints::Hints poppler/Hints.cc function of the Poppler PDF display library is related to a resource release error. with resource release errors. Exploitation of the vulnerability allows an attacker acting remotely, to cause a denial of service using a specially crafted PDF...

SUSE CVE-2025-39695

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flush delayed SKBs while releasing RXE resources When skb packets are sent out, these skb packets still depends on the rxe resources, for example, QP, sk, when these packets are destroyed. If these rxe resources are...

CVE-2025-39720

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix refcount leak causing resource not released When ksmbdconnreleasingopinfo-conn returns true,the refcount was not decremented properly, causing a refcount leak that prevents the count from reaching zero and the memory...

CVE-2025-39695

CVE-2025-39695 affects the Linux kernel RDMA/rxe path. The issue arises when skb packets that depend on RXE resources (e.g., QP, sk) are destroyed while RXE resources are being released, causing call traces. The patch adds a timestamp when skb packets are created to avoid skb packets hanging in s...

CVE-2025-39695 RDMA/rxe: Flush delayed SKBs while releasing RXE resources

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flush delayed SKBs while releasing RXE resources When skb packets are sent out, these skb packets still depends on the rxe resources, for example, QP, sk, when these packets are destroyed. If these rxe resources are...

The vulnerability of the fnic_wq_cmpl_handler function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fnicwqcmplhandler function in the Linux operating system’s kernel is related to improper release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the cma_netevent_callback() function in the drivers/infiniband/core/cma.c module of Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cmaneteventcallback function in the drivers/infiniband/core/cma.c module of Linux kernels is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the CP_RESET_CONTEXT_STATE() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the CPRESETCONTEXTSTATE function in Linux operating systems is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server lies in the fact that resources are not released after their useful period has ended. This allows attackers to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a malicious actor to cause service interruptions by...

The vulnerability of the raid1_reshape() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the raid1reshape function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-36071 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper release of memory resources...

UBUNTU-CVE-2025-38419

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when rprochandleresources fails in rprocattach When rproc-state = RPROCDETACHED and rprocattach is used to attach to the remote processor, if rprochandleresources returns a failure, th...

The vulnerability in the driver module drivers/clk/sunxi-ng/ccu-sun50i-h616.c of Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the drivers/clk/sunxi-ng/ccu-sun50i-h616.c module in Linux operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the kernel/trace/bpftrace.c module of the Linux operating system’s subsystem BPF allows a hacker to cause a service failure.

The vulnerability in the kernel/trace/bpftrace.c module of the Linux operating system’s subsystem BPF is related to improper resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the smp_processor_id() function in the drivers/scsi/smartpqi/smartpqi_init.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the smpprocessorid function in the drivers/scsi/smartpqi/smartpqiinit.c module of the Linux kernel is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the django.utils.html.strip_tags() function in the Django web application framework allows a attacker to cause a denial-of-service attack.

The vulnerability of the django.utils.html.striptags function in the Django web application framework is related to memory leaks caused by the improper use of this function for releasing resources. Exploiting this vulnerability could allow an attacker to cause a service failure...