CVE-2022-4450 Double free after calling PEM_read_bio_ex
Information published. Continue reading CVE-2022-4450 Double free after calling PEM_read_bio_ex
Month: February 2026
CVE-2024-5642 Buffer overread when using an empty list with SSLContext.set_npn_protocols()
CVE-2025-37874 net: ngbe: fix memory leak in ngbe_probe() error path
Information published. Continue reading CVE-2025-37874 net: ngbe: fix memory leak in ngbe_probe() error path
CVE-2022-49636 vlan: fix memory leak in vlan_newlink()
Information published. Continue reading CVE-2022-49636 vlan: fix memory leak in vlan_newlink()
CVE-2022-28737 There’s a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables
CVE-2023-51764 Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in recent versions). Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address allowing bypass of an SPF protection mechanism. This occurs because Postfix supports <LF>.<CR><LF> but some other popular e-mail servers do not. To prevent attack variants (by always disallowing <LF> without <CR>) a different solution is required such as the smtpd_forbid_bare_newline=yes option with a Postfix minimum version of 3.5.23 3.6.13 3.7.9 3.8.4 or 3.9.
CVE-2024-49992 drm/stm: Avoid use-after-free issues with crtc and plane
Information published. Continue reading CVE-2024-49992 drm/stm: Avoid use-after-free issues with crtc and plane