Поиск уязвимостей
Количество 33
Количество 33
BDU:2025-15806
Уязвимость компонента atm ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260323-80-0034
Уязвимость kernel-lt
ROS-20260323-73-0024
Уязвимость kernel-lt
CVE-2025-38546
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak.
CVE-2025-38546
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak.
CVE-2025-38546
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak.
CVE-2025-38546
atm: clip: Fix memory leak of struct clip_vcc.
CVE-2025-38546
In the Linux kernel, the following vulnerability has been resolved: a ...
GHSA-f6c4-25w9-79f8
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak.
ALT-PU-2025-16597
ALT-PU-2025-16597: package `kernel-image-un-def` update to version 6.1.146-alt1
ALT-PU-2025-16618
ALT-PU-2025-16618: package `kernel-image-rt` update to version 5.10.240-alt1.rt134
ALT-PU-2025-16605
ALT-PU-2025-16605: package `kernel-image-std-def` update to version 5.10.240-alt1
SUSE-SU-2025:03314-1
Security update for the Linux Kernel
SUSE-SU-2025:03310-1
Security update for the Linux Kernel
ALT-PU-2025-16509
ALT-PU-2025-16509: package `kernel-image-6.12` update to version 6.12.41-alt1
ALT-PU-2025-16464
ALT-PU-2025-16464: package `kernel-image-rt` update to version 6.12.41-alt1
SUSE-SU-2025:03344-1
Security update for the Linux Kernel
ELSA-2025-20716
ELSA-2025-20716: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2025:03204-1
Security update for the Linux Kernel
ALT-PU-2026-1529
ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-15806 Уязвимость компонента atm ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.7 | 0% Низкий | больше 1 года назад |
 | ROS-20260323-80-0034 Уязвимость kernel-lt | CVSS3: 4.7 | 0% Низкий | 8 месяцев назад |
| ROS-20260323-73-0024 Уязвимость kernel-lt | CVSS3: 4.7 | 0% Низкий | 8 месяцев назад |
 | CVE-2025-38546 In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-38546 In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-38546 In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | CVE-2025-38546 atm: clip: Fix memory leak of struct clip_vcc. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| CVE-2025-38546 In the Linux kernel, the following vulnerability has been resolved: a ... | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| GHSA-f6c4-25w9-79f8 In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) allocates struct clip_vcc and set it to vcc->user_back. The code assumes that vcc_destroy_socket() passes NULL skb to vcc->push() when the socket is close()d, and then clip_push() frees clip_vcc. However, ioctl(ATMARPD_CTRL) sets NULL to vcc->push() in atm_init_atmarp(), resulting in memory leak. Let's serialise two ioctl() by lock_sock() and check vcc->push() in atm_init_atmarp() to prevent memleak. | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| ALT-PU-2025-16597 ALT-PU-2025-16597: package `kernel-image-un-def` update to version 6.1.146-alt1 | CVSS3: 7.8 | больше 1 года назад | |
| ALT-PU-2025-16618 ALT-PU-2025-16618: package `kernel-image-rt` update to version 5.10.240-alt1.rt134 | CVSS3: 8 | больше 1 года назад | |
| ALT-PU-2025-16605 ALT-PU-2025-16605: package `kernel-image-std-def` update to version 5.10.240-alt1 | CVSS3: 8 | больше 1 года назад | |
 | SUSE-SU-2025:03314-1 Security update for the Linux Kernel | около 1 года назад | ||
| SUSE-SU-2025:03310-1 Security update for the Linux Kernel | около 1 года назад | ||
| ALT-PU-2025-16509 ALT-PU-2025-16509: package `kernel-image-6.12` update to version 6.12.41-alt1 | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2025-16464 ALT-PU-2025-16464: package `kernel-image-rt` update to version 6.12.41-alt1 | CVSS3: 8.8 | больше 1 года назад | |
| SUSE-SU-2025:03344-1 Security update for the Linux Kernel | около 1 года назад | ||
| ELSA-2025-20716 ELSA-2025-20716: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 года назад | ||
| SUSE-SU-2025:03204-1 Security update for the Linux Kernel | около 1 года назад | ||
| ALT-PU-2026-1529 ALT-PU-2026-1529: package `kernel-image-pine` update to version 6.12.66-alt1 | CVSS3: 9.8 | 10 месяцев назад |
Уязвимостей на страницу