Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 21

Количество 21

ubuntu логотип

CVE-2026-43432

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhci_disable_slot() only frees the command structure using kfree(), causing the completion structure to leak. Use xhci_free_command() instead of kfree(). xhci_free_command() correctly frees both the command structure and the associated completion structure. Since the command structure is allocated with zero-initialization, command->in_ctx is NULL and will not be erroneously freed by xhci_free_command(). This bug was found using an experimental static analysis tool we are developing. The tool is based on the LLVM framework and is specifically designed to detect memory management issues. It is currently under active development and not yet publicly available, but we plan to open-source it after our resear...

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2026-43432

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhci_disable_slot() only frees the command structure using kfree(), causing the completion structure to leak. Use xhci_free_command() instead of kfree(). xhci_free_command() correctly frees both the command structure and the associated completion structure. Since the command structure is allocated with zero-initialization, command->in_ctx is NULL and will not be erroneously freed by xhci_free_command(). This bug was found using an experimental static analysis tool we are developing. The tool is based on the LLVM framework and is specifically designed to detect memory management issues. It is currently under active development and not yet publicly available, but we plan to open-source it after our resear...

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2026-43432

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhci_disable_slot() only frees the command structure using kfree(), causing the completion structure to leak. Use xhci_free_command() instead of kfree(). xhci_free_command() correctly frees both the command structure and the associated completion structure. Since the command structure is allocated with zero-initialization, command->in_ctx is NULL and will not be erroneously freed by xhci_free_command(). This bug was found using an experimental static analysis tool we are developing. The tool is based on the LLVM framework and is specifically designed to detect memory management issues. It is currently under active development and not yet publicly available, but we plan to open-source it after our resea

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2026-43432

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: u ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-h4qw-x67f-352p

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhci_disable_slot() only frees the command structure using kfree(), causing the completion structure to leak. Use xhci_free_command() instead of kfree(). xhci_free_command() correctly frees both the command structure and the associated completion structure. Since the command structure is allocated with zero-initialization, command->in_ctx is NULL and will not be erroneously freed by xhci_free_command(). This bug was found using an experimental static analysis tool we are developing. The tool is based on the LLVM framework and is specifically designed to detect memory management issues. It is currently under active development and not yet publicly available, but we plan to open-source it after our re...

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2026-14143

8 месяцев назад

Уязвимость функции xhci_disable_slot() модуля drivers/usb/host/xhci.c драйвера устройств шины USB ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20261012-80-0037

14 дней назад

Уязвимость kernel-lt

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20261012-73-0036

14 дней назад

Уязвимость kernel-lt

CVSS3: 5.5
EPSS: Низкий
altlinux логотип

ALT-PU-2026-6748

7 месяцев назад

ALT-PU-2026-6748: package `kernel-image-un-def` update to version 6.1.167-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-7359

6 месяцев назад

ALT-PU-2026-7359: package `kernel-image-std-def` update to version 5.10.253-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-7109

6 месяцев назад

ALT-PU-2026-7109: package `kernel-image-rt` update to version 5.10.254-alt1.rt150

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-6772

7 месяцев назад

ALT-PU-2026-6772: package `kernel-image-pine` update to version 6.18.19-alt1

CVSS3: 9.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3166-1

3 месяца назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3130-1

3 месяца назад

Security update for the Linux Kernel

EPSS: Низкий
oracle-oval логотип

ELSA-2026-50372

4 месяца назад

ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21555-1

2 месяца назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-4865

7 месяцев назад

ALT-PU-2026-4865: package `kernel-image-6.18` update to version 6.18.19-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-6044

7 месяцев назад

ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-7006

6 месяцев назад

ALT-PU-2026-7006: package `kernel-image-6.12` update to version 6.12.85-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-7004

6 месяцев назад

ALT-PU-2026-7004: package `kernel-image-rt` update to version 6.12.85-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-43432

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhci_disable_slot() only frees the command structure using kfree(), causing the completion structure to leak. Use xhci_free_command() instead of kfree(). xhci_free_command() correctly frees both the command structure and the associated completion structure. Since the command structure is allocated with zero-initialization, command->in_ctx is NULL and will not be erroneously freed by xhci_free_command(). This bug was found using an experimental static analysis tool we are developing. The tool is based on the LLVM framework and is specifically designed to detect memory management issues. It is currently under active development and not yet publicly available, but we plan to open-source it after our resear...

CVSS3: 5.5
0%
Низкий
6 месяцев назад
redhat логотип
CVE-2026-43432

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhci_disable_slot() only frees the command structure using kfree(), causing the completion structure to leak. Use xhci_free_command() instead of kfree(). xhci_free_command() correctly frees both the command structure and the associated completion structure. Since the command structure is allocated with zero-initialization, command->in_ctx is NULL and will not be erroneously freed by xhci_free_command(). This bug was found using an experimental static analysis tool we are developing. The tool is based on the LLVM framework and is specifically designed to detect memory management issues. It is currently under active development and not yet publicly available, but we plan to open-source it after our resear...

CVSS3: 5.5
0%
Низкий
6 месяцев назад
nvd логотип
CVE-2026-43432

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhci_disable_slot() only frees the command structure using kfree(), causing the completion structure to leak. Use xhci_free_command() instead of kfree(). xhci_free_command() correctly frees both the command structure and the associated completion structure. Since the command structure is allocated with zero-initialization, command->in_ctx is NULL and will not be erroneously freed by xhci_free_command(). This bug was found using an experimental static analysis tool we are developing. The tool is based on the LLVM framework and is specifically designed to detect memory management issues. It is currently under active development and not yet publicly available, but we plan to open-source it after our resea

CVSS3: 5.5
0%
Низкий
6 месяцев назад
debian логотип
CVE-2026-43432

In the Linux kernel, the following vulnerability has been resolved: u ...

CVSS3: 5.5
0%
Низкий
6 месяцев назад
github логотип
GHSA-h4qw-x67f-352p

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhci_disable_slot() only frees the command structure using kfree(), causing the completion structure to leak. Use xhci_free_command() instead of kfree(). xhci_free_command() correctly frees both the command structure and the associated completion structure. Since the command structure is allocated with zero-initialization, command->in_ctx is NULL and will not be erroneously freed by xhci_free_command(). This bug was found using an experimental static analysis tool we are developing. The tool is based on the LLVM framework and is specifically designed to detect memory management issues. It is currently under active development and not yet publicly available, but we plan to open-source it after our re...

CVSS3: 5.5
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2026-14143

Уязвимость функции xhci_disable_slot() модуля drivers/usb/host/xhci.c драйвера устройств шины USB ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
0%
Низкий
8 месяцев назад
redos логотип
ROS-20261012-80-0037

Уязвимость kernel-lt

CVSS3: 5.5
0%
Низкий
14 дней назад
redos логотип
ROS-20261012-73-0036

Уязвимость kernel-lt

CVSS3: 5.5
0%
Низкий
14 дней назад
altlinux логотип
ALT-PU-2026-6748

ALT-PU-2026-6748: package `kernel-image-un-def` update to version 6.1.167-alt1

CVSS3: 9.8
7 месяцев назад
altlinux логотип
ALT-PU-2026-7359

ALT-PU-2026-7359: package `kernel-image-std-def` update to version 5.10.253-alt1

CVSS3: 9.8
6 месяцев назад
altlinux логотип
ALT-PU-2026-7109

ALT-PU-2026-7109: package `kernel-image-rt` update to version 5.10.254-alt1.rt150

CVSS3: 9.8
6 месяцев назад
altlinux логотип
ALT-PU-2026-6772

ALT-PU-2026-6772: package `kernel-image-pine` update to version 6.18.19-alt1

CVSS3: 9.8
7 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:3166-1

Security update for the Linux Kernel

3 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3130-1

Security update for the Linux Kernel

3 месяца назад
oracle-oval логотип
ELSA-2026-50372

ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)

4 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:21555-1

Security update for the Linux Kernel

2 месяца назад
altlinux логотип
ALT-PU-2026-4865

ALT-PU-2026-4865: package `kernel-image-6.18` update to version 6.18.19-alt1

CVSS3: 9.8
7 месяцев назад
altlinux логотип
ALT-PU-2026-6044

ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1

CVSS3: 9.8
7 месяцев назад
altlinux логотип
ALT-PU-2026-7006

ALT-PU-2026-7006: package `kernel-image-6.12` update to version 6.12.85-alt1

CVSS3: 9.8
6 месяцев назад
altlinux логотип
ALT-PU-2026-7004

ALT-PU-2026-7004: package `kernel-image-rt` update to version 6.12.85-alt1

CVSS3: 9.8
6 месяцев назад

Уязвимостей на страницу