Azure Linux 3.0 Security Update: kernel (CVE-2024-41002)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41002 advisory. - In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - Fix memory leak...

ROS-20260121-73-0051

A vulnerability in the ksmbd component of the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260120-7329

A vulnerability in the slimdotransfer function of the driver drivers/slimbus/messaging.c of the Linux kernel is related to incorrect resource release. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260119-7399

A vulnerability in the uvcvideo component of the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2025-56226

A flaw was found in the libsndfile library. This issue occurs when encoding MP3 files. During initialization, when an unsupported sample rate is detected, encoding resources are not released within the error-handling path due to an incomplete initialization, impacting system performance and...

ROS-20260114-7311

A vulnerability in the route.c component of the Linux kernel is related to resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260113-7370

A vulnerability in the nfsendreset6 function of the net/ipv6/netfilter/nfrejectipv6.c component of the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260112-7363

A vulnerability in the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the fromDhcpListClient() function in the Tenda CH22 router software allows a attacker to trigger a service failure.

The vulnerability of the fromDhcpListClient function in the Tenda CH22 router software relates to the improper release of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failure by sending a specially crafted POST request...

CVE-2024-41890

Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. User sends multiple password reset emails, each containing a valid link. Within the link's validity period, this could potentially lead to the link being misused o...

The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200, related to improper release of resources, allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200 is related to the improper release of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to cause malfunctions in the system...

CVE-2022-27499

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improper ordering of resource releases, which could lead to reuse after release...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an RDMA efa resource release in the wrong order, which could lead to reuse after release...

EUVD-2023-60330

In the Linux kernel, the following vulnerability has been resolved: pcmcia: rsrcnonstatic: Fix memory leak in nonstaticreleaseresourcedb When nonstaticreleaseresourcedb frees all resources associated with an PCMCIA socket, it forgets to free socketdata too, causing a memory leak observable with...

CVE-2022-50725

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix use-after-free in vidtvbridgedvbinit KASAN reports a use-after-free: BUG: KASAN: use-after-free in dvbdmxdevrelease+0x4d5/0x5d0 dvbcore Call Trace: ... dvbdmxdevrelease+0x4d5/0x5d0 dvbcore...

UBUNTU-CVE-2022-50727

In the Linux kernel, the following vulnerability has been resolved: scsi: efct: Fix possible memleak in efctdeviceinit In efctdeviceinit, when efctscsiregfctransport fails, efctscsitgtdriverexit is not called to release memory for efctscsitgtdriverinit and causes memleak: unreferenced object...

CVE-2022-50715

CVE-2022-50715 — Linux kernel md/raid1 NULL dereference during poweroff . When an md raid1 array fails to assemble with an inactive disk, the mdx_raid1 thread is not stopped, leading to a NULL pointer dereference during poweroff. The working fix is to unregister the md thread before freeing RAID1...

PT-2025-54999

Уязвимость модуля drivers/nvme/host/fc.c ядра операционной системы Linux связана с неправильным отключением или высвобождением ресурсов. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

SUSE CVE-2025-68306

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface When performing reset tests and encountering abnormal card drop issues that lead to a kernel crash, it is necessary to perform a null check before...