The vulnerability of the `unregister_netdevice_many_notify()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the unregisternetdevicemanynotify function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the landing module of the Bitrix24 business management service for the Content Management System (CMS) 1C-Bitrix: Website management related to incorrect handling of PHP functions like include or require, allowing attackers to execute arbitrary code.

Vulnerability of the landing module of the Bitrix24 business management service for content management systems CMS: Website management is related to incorrect handling of file names used in PHP functions like include or require. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the genpddebug_add() function in the drivers/base/power/domain.c file of the Linux kernel’s device driver framework allows a hacker to cause a service failure.

The vulnerability of the genpddebugadd function in the drivers/base/power/domain.c file of the Linux kernel’s bus driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the __acquires() function in the kernel/workqueue.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acquires function in the kernel/workqueue.c module of the Linux operating system is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the udf_name_from_CS0() function in the fs/udf/unicode.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the udfnamefromCS0 function in the fs/udf/unicode.c module of the Linux kernel file system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the __sta_infodestroy_part1() function in the net/mac80211/sta_info.c module, part of the mac80211 stack in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stainfodestroypart1 function in the net/mac80211/stainfo.c module, part of the mac80211 stack in the Linux operating system, is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the `bnxt_rx_pkt()` function in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` file of the Linux kernel’s Ethernet adapter support driver allows a hacker to cause a system failure.

The vulnerability of the bnxtrxpkt function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Linux kernel’s Ethernet adapter support driver is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the rbeprev() function in Linux operating system kernels, which allows a perpetrator to compromise the accessibility of protected information

The vulnerability of the rbeprev function in Linux operating systems is related to excessive iteration. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the erofs_worker() function in Linux operating system kernels, which allows a hacker to compromise the accessibility of protected information

The vulnerability of the erofsworker function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the mpi3mrremove() function in Linux operating system kernels allows a attacker to compromise the accessibility of protected information.

The vulnerability of the mpi3mrremove function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the hinic_dbg_get_func_table() function in the drivers/net/ethernet/huawei/hinic/hinicdebugfs.c file of the Linux kernel’s Ethernet network adapter driver allows a hacker to cause a service failure.

The vulnerability of the hinicdbggetfunctable function in the drivers/net/ethernet/huawei/hinic/hinicdebugfs.c file of the Linux kernel’s Ethernet network adapter driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the wmt_mci_probe() function in the drivers/mmc/host/wmt-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wmtmciprobe function in the drivers/mmc/host/wmt-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __acquires() function in the drivers/md/md-bitmap.c file of the multi-device driver module for Linux operating systems, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the acquires function in the drivers/md/md-bitmap.c file of the Linux device driver module for multiple devices such as RAID and LVM is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the remove() function in Linux operating system kernels, which allows a attacker to compromise the accessibility of protected information

The vulnerability of the remove function in Linux operating system kernels is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the fromNatlimitof() function in the httpd daemon of the Tenda F456 microprogramming router software, which allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the fromNatlimitof function in the httpd daemon of the Tenda F456 microprogramming router lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause service failures or execute arbitrary code by...

Unity Linux 20.1050e / 20.1070e Security Update: libxslt (UTSA-2026-014831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014831 advisory. A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function...

RockyLinux 8 : libxml2 (RLSA-2026:11349)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:11349 advisory. libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c CVE-2025-9714 Tenable has extracted the preceding description block...

vim security update

8.2.2637-23.0.1.el97.3 - Remove upstream references Orabug: 31197557 2:8.2.2637-23.3 - Resolves: RHEL-164965 vim: arbitrary command execution via modeline sandbox bypass 2:8.2.2637-23.2 - RHEL-155437 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin -...

BioinfoMCP 路径遍历漏洞

BioinfoMCP is an bioinformatics AI platform developed by Florensiawidjaja. It serves to connect command-line tools with intelligent workflows. BioinfoMCP has a path traversal vulnerability, which stems from improper handling of the parameter Name in the Upload function located in the file...

The vulnerabilities of the functions pci_init_afu() and cxl_pci_init_adapter() in the drivers/misc/cxl/pci.c module of the Linux kernel allow a hacker to cause a service failure.

The vulnerability of the functions pciinitafu and cxlpciinitadapter in the drivers/misc/cxl/pci.c module of the Linux kernel is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...