SUSE CVE-2025-38628

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix release of uninitialized resources on error path The commit in the fixes tag made sure that mlx5vdpafree is the single entrypoint for removing the vdpa device resources added in mlx5vdpadevadd, even in the cleanup...

Linux net/hsr/hsr_forward.c Heap Buffer Overflow DoS

The vulnerability of the fillframeinfo function in the net/hsr/hsrforward.c module of the Linux operating system is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2024-47687

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix invalid mr resource destroy Certain error paths from mlx5vdpadevadd can end up releasing mr resources which never got initialized in the first place. This patch adds the missing check in mlx5vdpadestroymrresources ...