Поиск уязвимостей
Количество 33
Количество 33
CVE-2025-38546
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak.
CVE-2025-38546
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak.
CVE-2025-38546
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak.
CVE-2025-38546
atm: clip: Fix memory leak of struct clip_vcc.
CVE-2025-38546
In the Linux kernel, the following vulnerability has been resolved: a ...
GHSA-f6c4-25w9-79f8
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak.
BDU:2025-15806
Уязвимость компонента atm ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260323-80-0034
Уязвимость kernel-lt
ROS-20260323-73-0024
Уязвимость kernel-lt
SUSE-SU-2025:03314-1
Security update for the Linux Kernel
SUSE-SU-2025:03310-1
Security update for the Linux Kernel
SUSE-SU-2025:03344-1
Security update for the Linux Kernel
ELSA-2025-20716
ELSA-2025-20716: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2025:03204-1
Security update for the Linux Kernel
ALT-PU-2025-16597
ALT-PU-2025-16597: package `kernel-image-un-def` update to version 6.1.146-alt1
ALT-PU-2025-16618
ALT-PU-2025-16618: package `kernel-image-rt` update to version 5.10.240-alt1.rt134
SUSE-SU-2025:03272-1
Security update for the Linux Kernel
SUSE-SU-2025:03301-1
Security update for the Linux Kernel
SUSE-SU-2025:03382-1
Security update for the Linux Kernel
SUSE-SU-2025:03290-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-38546 In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-38546 In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-38546 In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-38546 atm: clip: Fix memory leak of struct clip_vcc. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| CVE-2025-38546 In the Linux kernel, the following vulnerability has been resolved: a ... | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| GHSA-f6c4-25w9-79f8 In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | BDU:2025-15806 Уязвимость компонента atm ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.7 | 0% Низкий | больше 1 года назад |
 | ROS-20260323-80-0034 Уязвимость kernel-lt | CVSS3: 4.7 | 0% Низкий | 8 месяцев назад |
| ROS-20260323-73-0024 Уязвимость kernel-lt | CVSS3: 4.7 | 0% Низкий | 8 месяцев назад |
 | SUSE-SU-2025:03314-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03310-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03344-1 Security update for the Linux Kernel | около 1 года назад | ||
| ELSA-2025-20716 ELSA-2025-20716: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 года назад | ||
| SUSE-SU-2025:03204-1 Security update for the Linux Kernel | около 1 года назад | ||
| ALT-PU-2025-16597 ALT-PU-2025-16597: package `kernel-image-un-def` update to version 6.1.146-alt1 | CVSS3: 7.8 | больше 1 года назад | |
| ALT-PU-2025-16618 ALT-PU-2025-16618: package `kernel-image-rt` update to version 5.10.240-alt1.rt134 | CVSS3: 8 | больше 1 года назад | |
| SUSE-SU-2025:03272-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03301-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03382-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03290-1 Security update for the Linux Kernel | около 1 года назад |
Уязвимостей на страницу