Jason Self

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a use-after-free error in the iwlwifi module of the Linux kernel. When no firmware is present or all firmware files fail to parse, the device release driver() function is called, leading to the removal of the 'drv' struct. However, the new code still attempts to access the freed struct, causing an error. Setting 'failure=false' can avoid this access. The vulnerability may impact the confidentiality, integrity, and availability of protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple Mac OS X Server version 10.3.9 **Description** The issue is related to Perl in Apple Mac OS X Server, where it does not properly drop privileges when using the `$<` variable to set uid. This allows attackers to gain privileges. **Recommendations** For Apple Mac OS X Server version 10.3.9, consider restricting the use of the `$<` variable in Perl scripts until a patch is available. As a temporary workaround, review and modify Perl scripts to properly handle privilege dropping. At the moment, there is no information about a newer version that contains a fix for this vulnerability.