double free

  1. CVE-2026-23068 Double-Free in Linux spi-sprd-adi: Devm Lifecycle Fix

    CVE-2026-23068 is a reminder that some of the Linux kernel’s most consequential security issues are not dramatic logic bugs, but lifecycle mistakes in error handling. In this case, the vulnerable code path sits in the spi-sprd-adi driver, where a controller allocated one way and released another...
  2. HDF5 CVE-2025-2925: Fix for H5MM_realloc double-free vulnerability

    A small, easily overlooked piece of memory-management logic in the HDF5 C library has been rewarded with a CVE and a fast upstream fix: CVE-2025-2925 identifies a double‑free in the HDF5 function H5MM_realloc (src/H5MM.c) that can be triggered when a caller passes an effective size of zero. The...
  3. Linux Kernel Patch Fixes Double Free in s390 ctcm Driver (CVE-2025-40253)

    The Linux kernel has received a targeted, low‑risk fix for CVE‑2025‑40253 — a double‑free defect inside the s390 ctcm driver — that removes a redundant kfree and eliminates a potential kernel memory‑corruption path reported by a static analyzer. The change is surgical: maintainers removed the...
  4. Urgent Patch: Sante PACS Server Vulnerabilities (Path Traversal, Memory Corruption, XSS)

    Santesoft’s Sante PACS Server has been the subject of a coordinated advisory cluster this week after multiple remote‑exploitable flaws were disclosed that affect versions prior to 4.2.3, and at least one authoritative vulnerability bulletin places the combined impact at near‑critical severity...
  5. J

    Windows 7 MS Windows NtRaiseHardError Csrss.exe-winsrv.dll Double Free

    oeno! Code: Link Removed due to 404 Error Need I say more? josh_rain