kernel: drm/amdgpu: add error handle to avoid out-of-bounds

A flaw was found in the Linux kernel's drm/amdgpu component. This vulnerability, caused by an out-of-bounds read in the sdmav40irqidtoseq function, could allow a local attacker to read sensitive information from kernel memory. This could lead to information disclosure or a denial of service DoS d...

Automated Attack Testflow Extraction from Cyber Threat Report Using BERT for Contextual Analysis

In the ever-evolving landscape of cybersecurity, the rapid identification and mitigation of Advanced Persistent Threats APTs is crucial. Security practitioners rely on detailed threat reports to understand the tactics, techniques, and procedures TTPs employed by attackers. However, manually...

50M_CTF_Writeup

It is an offensive tool for CTF Capture The Flag challenges. The repository contains a writeup for a $50 million CTF challenge, which includes a binary image that needs to be decoded to reveal a hidden message. The binary image is encoded with a repeating sequence of binary digits, which can be...

DEBIAN-CVE-2025-38224

In the Linux kernel, the following vulnerability has been resolved: can: kvaserpciefd: refine error prone echoskbmax handling logic echoskbmax should define the supported upper limit of echoskb allocated inside the netdevice's priv. The corresponding size value provided by this driver to...

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a intruder to gain unauthorized access to the system’s functional capabilities.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system’s functions...

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a intruder to gain unauthorized access to the system’s functional capabilities.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system’s functions...

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a malicious user to gain unauthorized access to the application’s functions.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to the application’s functions...

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a malicious user to gain unauthorized access to the application’s functions.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to the application’s functions...

RVISmith: Fuzzing Compilers for RVV Intrinsics

Modern processors are equipped with single instruction multiple data SIMD instructions for fine-grained data parallelism. Compiler auto-vectorization techniques that target SIMD instructions face performance limitations due to insufficient information available at compile time, requiring...

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a intruder to gain unauthorized access to the system’s functional capabilities.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system’s functions...

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a intruder to gain unauthorized access to the system’s functional capabilities.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system’s functions...

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a intruder to gain unauthorized access to the system’s functional capabilities.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system’s functions...

SUSE CVE-2018-20199

A NULL pointer dereference was discovered in ifilterbank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service because adding to windowed output is mishandled in the...

SUSE CVE-2018-20362

A NULL pointer dereference was discovered in ifilterbank of libfaad/filtbank.c in Freeware Advanced Audio Decoder 2 FAAD2 2.8.8. The vulnerability causes a segmentation fault and application crash because adding to windowed output is mishandled in the EIGHTSHORTSEQUENCE case...

AZL-64601 CVE-2025-38136 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Reorder clock handling and power management in probe Reorder the initialization sequence in usbhsprobe to enable runtime PM before accessing registers, preventing potential crashes due to uninitialized clocks...

UBUNTU-CVE-2025-38136

In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Reorder clock handling and power management in probe Reorder the initialization sequence in usbhsprobe to enable runtime PM before accessing registers, preventing potential crashes due to uninitialized clocks...

CVE-2025-38136 usb: renesas_usbhs: Reorder clock handling and power management in probe

In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Reorder clock handling and power management in probe Reorder the initialization sequence in usbhsprobe to enable runtime PM before accessing registers, preventing potential crashes due to uninitialized clocks...

CLSA-2025-1750780819 Fix CVE(s): CVE-2025-31651

SECURITY UPDATE: Improper Neutralization of Escape, Meta, or Control Sequences vulnerability - debian/patches/CVE-2025-31651.patch: Enforces rewrite rules to preventing bypass of security constraints in specific configurations - CVE-2025-31651...

CVE-2025-38080

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase blocksequence array size Why It's possible to generate more than 50 steps in hwssbuildfastsequence, for example with a 6-pipe asic where all pipes are in one MPC chain. This overflows the blocksequence...

SUSE CVE-2025-38080

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Increase blocksequence array size Why It's possible to generate more than 50 steps in hwssbuildfastsequence, for example with a 6-pipe asic where all pipes are in one MPC chain. This overflows the blocksequence...