CVE-2025-39860

CVE-2025-39860 – Linux kernel Bluetooth UAF in l2cap_sock_cleanup_listen() . The vulnerability arises from a race between bt_accept_dequeue() and l2cap_sock_cleanup_listen() where a socket could be freed while another path still holds a reference. The root cause is a race in the l2cap_sock_cleanu...

CVE-2025-38542

CVE-2025-38542 affects the Linux kernel net:appletalk code. The vulnerability is a device refcount leak in atrtr_create(): during route entry updates, the old device reference was not released before assigning the new one, leading to a leak. The fix releases the old reference with dev_put() befor...

CVE-2025-38569

CVE-2025-38569 (Linux kernel benet) arises from a bug in the be2net SR-IOV VF MAC address configuration flow where be_cmd_set_mac_list() calls dma_free_coherent() while still under spin_lock_bh, leading to a kernel crash (BUG at mm/vmalloc.c and OOPs) when SR-IOV VFs are created. The linked advis...

CVE-2025-38639

CVE-2025-38639 affects the Linux kernel netfilter xt_nfacct component. The issue is triggered by assuming the acct name is null-terminated, which can enable out-of-bounds reads. Multiple advisories note this is resolved by upgrading kernel versions; for example, Mariner/Mariner-like reports indic...

CVE-2025-38721

CVE-2025-38721 affects the Linux kernel netfilter ctnetlink table dump path. A reference count leak in ctnetlink_dump_table() can occur if res ct_general) only when ct != last, and a cookie-based workaround is mentioned as an alternative. The Astra Linux bulletin confirms the same vulnerability i...

CVE-2025-38728

Technical details for CVE-2025-38728 are not publicly provided in the supplied documents. Monitor official advisories and vendor notices for updates.

CVE-2025-39719

CVE-2025-39719 reports a Linux kernel vulnerability in iio: imu: bno055 where an out-of-bounds access could occur due to iterating the hw_xlate array with the length of vals instead of hw_xlate. The fix adds a hw_xlate_len field to the bno055_sysfs_attr to ensure correct bounds during bno055_get_...

CVE-2025-39730

CVE-2025-39730 is a Linux kernel issue affecting NFS filehandle handling. The connected Astra/Amazon Linux livepatch advisories (ALAS2023LIVEPATCH-2025-108 and related entries) confirm a fix for NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() by ensuring the minimal filehandle length is...

CVE-2025-39838

CVE-2025-39838 (Linux kernel CIFS UTF16 conversion) Description context: A NULL pointer dereference can occur during UTF16 conversion in the CIFS code path of the Linux kernel. Specifically, a NULL value can be passed to __cifs_sfu_make_node, which then propagates to cifs_strndup_to_utf16 and eve...

CVE-2025-39841

CVE-2025-39841 is a Linux kernel vulnerability affecting the SCSI lpfc path in the deferred receive path, causing a use-after-free due to an incorrect buffer release/clear order. The issue arises because the code freed the RQ buffer before clearing the context pointer under the lock, while other ...

CVE-2025-39844

CVE-2025-39844 relates to a Linux kernel memory-management bug where page-table synchronization was not consistently performed when vmemmap spans multiple PGD entries. The issue caused intermittent boot failures and a kernel panic (notably on 4-level paging with large persistent memory) due to a ...

CVE-2026-56968

CVE-2026-56968 affects GNU SASL versions prior to 2.2.4. The NTLM client’s short challenge in the function _gsasl_ntlm_client_step has inadequate sanitization, which can lead to memory disclosure when interacting with a crafted server. Public sources (SUSE, Debian OSV, Ubuntu/Ubuntu-related advis...

CVE-2001-0235

CVE-2001-0235 affects crontab in Vixie cron. Local users can read other users’ crontab files by replacing the temporary file used during editing while cron is running. Documented impact is partial confidentiality loss with a low base score (CVSS v2.0: 2.1, LOCAL access, no authentication). Connec...

CVE-2001-1331

CVE-2001-1331 affects the man-db package’s mandb tool. The vulnerability exists in mandb before version 2.3.16-3, where invoking mandb with -u or -c does not drop privileges and does not drop file-system symlinks, enabling local users to overwrite arbitrary files. Impact is local, potentially ena...

CVE-2011-3618

CVE-2011-3618 relates to a symlink attack caused by insecure tempfile handling in the tool described as “atop.” The linked records (NVD, OSV, Debian/Ubuntu trackers and others) consistently cite this issue as a local‑attack vulnerability with insecure tempfile handling, leading to potential expos...

CVE-2012-0843

CVE-2012-0843 affects the uzbl browser, where information disclosure arises from a world-readable cookies storage file. Root cause is exposure of cookies data stored in a world-readable file, enabling partial confidentiality impact (C: HIGH in CVSS3.1) with local, low-complexity access and no aut...

CVE-2016-7118

CVE-2016-7118 affects the aufs 3.2.x patch in the Linux kernel on Debian Wheezy (kernel 3.2.81-1). Calling fcntl() on a directory on an AUFS filesystem can trigger an oops, enabling local denial-of-service. Debian’s DLA-609-1 fixes this in linux 3.2.81-2; Jessie had earlier fixes for other CVEs, ...

CVE-2017-16899

CVE-2017-16899 affects the Xfig figure conversion tool (fig2dev) in the fig2dev program, with an array index error related to a negative font value in dev/gentikz.c and in the read_textobject routines (read.c and read1_3.c). The vulnerability can allow remote attackers to cause a denial-of-servic...

CVE-2017-7671

CVE-2017-7671 is linked to a TLS handshake DoS in Apache Traffic Server (ATS). The Vulners/EUVD/OpenVAS/Nessus-derived documents confirm: vulnerable ATS versions are 5.2.0–5.3.2, 6.0.0–6.2.0, and 7.0.0, with the issue leading to a server coredump. Public references also show Debian DSAs recommend...

CVE-2018-7487

CVE-2018-7487 describes a heap-based buffer overflow in the LoadPCX function (in_pcx.cpp) of sam2p 0.49.4. A crafted input may cause a denial of service or unspecified impact. The entry is corroborated by multiple connected records (CNVD-2018-06417, OSV entries) noting the same LoadPCX heap overf...

CVE-2018-7551

CVE-2018-7551: There is an invalid free in MiniPS::delete0 in minips.cpp causing a segmentation fault in sam2p 0.49.4. A crafted input may lead to denial of service or unspecified other impact. This vulnerability is documented across multiple sources (NVD, OSV, Mageia, Debian NASL/OpenVAS records...

CVE-2018-7556

Vulnerability: LimeSurvey (versions 2.6.x before 2.6.7, 2.7x.x before 2.73.1, and 3.x before 3.4.2) mishandles application/controller/InstallerController.php after installation, allowing remote attackers to access the configuration file (information disclosure). This is a file-disclosure issue du...

CVE-2025-38609

CVE-2025-38609 is a Linux kernel vulnerability in the PM/devfreq subsystem where code could dereference governor->name if governor is NULL. The fix, implemented by moving the NULL check before accessing governor->name, updates the handling of the governor to prevent a null pointer exception...

CVE-2025-38668

CVE-2025-38668: In the Linux kernel regulator core, a NULL pointer dereference can occur on unbind if coupling data is stale because coupling_desc.n_coupled is not reset after freeing coupled_rdevs. This can affect runtime PM and other regulator operations that rely on coupling metadata, potentia...

CVE-2025-39683

CVE-2025-39683 (Linux kernel tracing vulnerability) The issue occurs when processing long strings in ftrace filters: trace_get_user may fail, but parser->buffer end is not zeroed, leading to a slab-out-of-bounds read in strsep/ftrace_process_regex and related release paths. The result is a loc...

CVE-2025-39808

CVE-2025-39808 – Linux kernel HID-ntrig null-deref fix . Affects HID-ntrig in the Linux kernel. In ntrig_report_version(), a hdev structure copied from hid_probe() could lead to a page fault when a descriptor was sent to /dev/uhid if hdev->dev.parent->parent was NULL. The fix adds a null-ch...

CVE-2026-12996

CVE-2026-12996 affects OpenVPN 2.6.0–2.6.20 and 2.7_alpha1–2.7.4, via a use-after-free in ack_write_buf triggered by specific control/auth sequence during TLS session promotion/expiry, potentially causing a crash or memory leak (denial of service). Connected advisories note that updates exist to ...

CVE-1999-1330

The CVE-1999-1330 issue affects the db library’s snprintf usage in version 1.85.4, where the size parameter is ignored and could permit buffer overflows that proper snprintf implementation would prevent. This describes a potential local memory corruption risk. Exploitation details or concrete rem...

CVE-2000-0512

CUPS 1.04 and earlier versions are affected: they do not properly delete request files, allowing a remote attacker to cause a denial of service. Exploitation is network-based and does not require authentication; a patch exists (cups-DoS.patch) and related updates are referenced in the CVE context...

CVE-2006-6614

The CVE-2006-6614 issue affects Fully Automatic Installation (FAI) 2.10.1 (and possibly 3.1.2). When verbose mode is enabled, the save_log_local function writes the root password hash to /var/log/fai/current/fai.log, and the log file’s permissions permit copying to other hosts when fai-savelog is...

CVE-2011-2902

zxpdf in xpdf before 3.02-19 (Debian unstable) and 3.02-12+squeeze1 (Debian squeeze) insecurely deletes temporary files, enabling remote attackers to delete arbitrary files via a crafted .pdf.gz filename. The vulnerability is a file-deletion flaw within zxpdf, not a memory corruption or code-exec...

CVE-2016-3993

CVE-2016-3993 affects the Imlib2 library (imlib2) due to an off-by-one error in the __imlib_MergeUpdate function (lib/updates.c) present before version 1.4.9. This results in an out-of-bounds read and can cause a denial of service (application crash) when processing crafted coordinates. Connected...

CVE-2016-4561

CVE-2016-4561 affects ikiwiki’s CGI.pm cgierror function, where an XSS exists in error messages for ikiwiki before 3.20160506. Exploitation could inject script/HTML in victims’ sessions. Public advisories note mitigation via updates to ikiwiki (e.g., Debian/DSA-3571-1, Mageia MGASA-2019-0113, Deb...

CVE-2018-7868

The CVE-2018-7868 issue is a heap-based buffer over-read in libming 0.4.8, specifically in util/decompile.c:getName for CONSTANT8 data, leading to denial of service. Multiple connected sources corroborate this vulnerability and references to libming up to 0.4.8 (and related CVEs) being addressed ...

CVE-2018-7869

CVE-2018-7869 concerns libming 0.4.8, with a memory leak in the function dcinit (util/decompile.c) that leads to a denial of service. Documents consistently identify the affected component as libming 0.4.8 and the leakage in dcinit; no explicit exploitation details or patches are provided in the ...

CVE-2025-38510

The CVE-2025-38510 issue in the Linux kernel is about the KASAN memory debugger. The fix removes kasan_find_vm_area() to avoid deadlocks during KASAN reporting when find_vm_area() would be called in an atomic_context. The vulnerability stemmed from a potential deadlock between kernel VM area repo...

CVE-2025-38535

CVE-2025-38535 relates to the Linux kernel on Tegra XUSB where regulator disable logic became unbalanced when leaving USB_ROLE_DEVICE. The fix moves regulator control into tegra186_xusb_padctl_id_override() and disables the regulator only when transitioning from USB_ROLE_HOST to USB_ROLE_NONE aft...

CVE-2025-38634

The CVE-2025-38634 issue is in the Linux kernel’s CPCAP charger code. In cpcap_usb_detect(), power_supply_get_by_name() can return NULL instead of an error pointer, risking a NULL dereference. A null check was added to prevent this. Impact is described as local, with availability impact, and a ME...

CVE-2025-38650

CVE-2025-38650 affects the Linux kernel hfsplus code path. The issue arises from a deadlock-prone interaction around the extents tree: the code previously invoked mutex_lock in a path leading to hfsplus_free_extents, and a commit (31651c607151) was applied to unlock the extents tree before hfsplu...

CVE-2025-39716

CVE-2025-39716 affects the Linux kernel (parisc) and describes a read-access checking issue in __get_user(). Because read access support was only triggered at privilege levels 2/3, the kernel ran at ring 0 and failed to raise a read-access fault (code 26). The fix probes read access rights at pri...

CVE-2025-39782

CVE-2025-39782 concerns the Linux kernel, specifically the JBD2 journal path. The issue arises because jbd2_log_do_checkpoint() and jbd2_journal_shrink_checkpoint_list() contend for j_list_lock, potentially causing long wait times that can trigger softlockups if sleeping calls do not occur. The a...

CVE-2025-39800

CVE-2025-39800 affects the Linux kernel’s btrfs subsystem, specifically the btrfs_copy_root() path. The issue occurs when cloning an extent buffer with an unexpected eb generation: instead of aborting the transaction, the code would WARN_ON() and allow metadata to persist with the unexpected gene...

CVE-1999-0804

CVE-1999-0804 affects Linux 2.2.x kernels, where the vulnerability lies in ICMP handling. Malformed ICMP packets with unusual types, codes and IP header lengths can cause a denial of service. The NVD CVSS v2 base score is 5.0 (Medium), with network attack vector, low attack complexity, and partia...

CVE-1999-1390

CVE-1999-1390 affects suidexec in suidmanager 0.18 on Debian 2.0, where local users can gain root privileges by specifying a malicious program on the command line. The issue is a local privilege escalation; the exact root cause is not fully detailed in the provided documents. Affected component i...

CVE-2000-0513

CVE-2000-0513 affects CUPS 1.04 and earlier. The vulnerability allows remote DoS when an attacker authenticates with a username that either does not exist or lacks a shadow password. Impact is denial of service (PARTIAL availability). The reports reference a DoS patch (cups-DoS.patch) and public ...

CVE-2001-0193

CVE-2001-0193 describes a format-string vulnerability in the man page viewer, observed in some Linux distributions via the -l parameter, enabling local privilege escalation. Connected documents identify Debian as affected via the man-db package and reference Debian Security Advisory DSA-028-1, wh...

CVE-2011-1070

CVE-2011-1070 involves v86d (before 0.1.10) failing to verify that netlink messages originate from the kernel. This can allow a local, unprivileged attacker to manipulate the video mode and potentially other consequences. Remediation per connected entries is to upgrade to v86d 0.1.10 or newer (pa...

CVE-2011-1588

CVE-2011-1588 affects Thunar up to version 1.3.1, where a crash can occur when copying and pasting a file name containing % format characters due to a format string error. The root cause is a faulty format string handling in the relevant code path. The connected advisories indicate a fix in the O...

CVE-2012-2350

Technical details about CVE-2012-2350 are not publicly available in the provided documents; monitor for updates from vendors and security trackers.

CVE-2013-6049

apt-listbugs before 0.1.10 creates temporary files insecurely, enabling attackers to achieve unspecified impact via unknown vectors. The issue is documented across multiple sources (CVE-2013-6049 and related records) and is tied to an insecure temporary-file approach in the package. Root cause: u...