CVE-2023-54010

The CVE-2023-54010 entry is substantiated by connected advisories stating a Linux kernel ACPICA issue: ACPICA did not check the null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects. The underlying problem is that ACPI_ALLOCATE_ZEROED may fail, causing object_info to be null and later de...

CVE-2025-68365 fs/ntfs3: Initialize allocated memory before use

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfsreadhdr 3 - KMSAN: uninit-value in bcmp 3 Memory is allocated by getname, which is a wrapper for...

SUSE CVE-2023-53808

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix memory leak in mwifiexhistogramread Always free the zeroed page on return from 'mwifiexhistogramread'...

EUVD-2023-60098

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix memory leak in mwifiexhistogramread Always free the zeroed page on return from 'mwifiexhistogramread'...

EUVD-2023-60089

In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - avoid null pointer deref in mpicmpui During NVMeTCP Authentication a controller can trigger a kernel oops by specifying the 8192 bit Diffie Hellman group and passing a correctly sized, but zeroed Diffie Hellamn...

DEBIAN-CVE-2023-53808

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix memory leak in mwifiexhistogramread Always free the zeroed page on return from 'mwifiexhistogramread'...

CVE-2023-53808

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix memory leak in mwifiexhistogramread Always free the zeroed page on return from 'mwifiexhistogramread'...

UBUNTU-CVE-2023-53808

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix memory leak in mwifiexhistogramread Always free the zeroed page on return from 'mwifiexhistogramread'...

CVE-2023-53817

CVE-2023-53817 affects the Linux kernel in crypto: lib/mpi, where mpi_cmp_ui() can dereference a null pointer due to a DH validation path used in NVMe/TCP authentication. The advisory notes an attacker could trigger a kernel oops by negotiating an 8192-bit DH group and supplying a correctly sized...

CVE-2023-53808

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix memory leak in mwifiexhistogramread Always free the zeroed page on return from 'mwifiexhistogramread'...

CVE-2023-53808

CVE-2023-53808 pertains to the Linux kernel WiFi driver mwifiex. The vulnerability is a memory leak in mwifiex_histogram_read(); the fix ensures the zeroed page is always freed on return from mwifiex_histogram_read(). Affected component is the mwifiex histogram read path inside the mwifiex subsys...

CVE-2023-53808 wifi: mwifiex: fix memory leak in mwifiex_histogram_read()

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix memory leak in mwifiexhistogramread Always free the zeroed page on return from 'mwifiexhistogramread'...

PT-2025-49668

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the mwifiex histogram read function within the mwifiex module. The issue occurs because a zeroed page is not always freed upon return from the function, leading t...

CVE-2025-40221

CVE-2025-40221 (Linux kernel) affects the media: pci: mg4b subsystem. The vulnerability stems from uninitialized iio scan data that can leak uninitialized stack data to userspace. The fix zeros the scan structure before use to prevent leaking sensitive data. Affected environments reference patche...

CVE-2025-13470 RNP 0.18.0 Vulnerable PKESK session keys

In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key PKESK packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release...

CVE-2025-13402

Removed by vendor...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990834)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990834 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPICA: check null return of ACPIALLOCATEZEROED in acpidbconverttopackage ACPICA commit...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990531 advisory. In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copyname syzbot reported BUG: KMSAN: uninit-value in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990491)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990491 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: fix unexpected zeroed page mapping with zram swap Two processes under CLONEVM cloning, user...

CVE-2023-53713

CVE-2023-53713: In the Linux kernel arm64 SME, the FFR context field was cleared with an unconditional 8-byte store, which could fail to clear or corrupt memory when SME vector length is not 64 bytes. The patch replaces this 8-byte store with a store of a zero-initialized PFALSE predicate registe...