35589 matches found
kernel: nfsd: don't ignore the return code of svc_proc_register()
In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix...
CVE-2025-40215
In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x-tunnel as we delete x The ipcomp fallback tunnels currently get deleted from the various lists and hashtables as the last user state that needed that fallback is destroyed not deleted. If a reference to that user...
CVE-2025-40215 xfrm: delete x->tunnel as we delete x
In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x-tunnel as we delete x The ipcomp fallback tunnels currently get deleted from the various lists and hashtables as the last user state that needed that fallback is destroyed not deleted. If a reference to that user...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from virtio-net not zeroing out unused hash fields, which could lead to information disclosure...
PT-2025-49063
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the virtio-net module. Specifically, when GSO tunnel is negotiated, the virtio net hdr tnl from skb function fails to zero unused rxhash fields...
The vulnerability of the net/xfrm component in the Linux operating system, related to the use of memory after it is freed, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the net/xfrm component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability in the net/netfilter/nf_bpf_link.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the net/netfilter/nfbpflink.c component in the Linux operating system is related to insufficient blocking. Exploiting this vulnerability allows an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2025-40255
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: core: prevent NULL deref in generichwtstampioctllower The ethtool tsconfig Netlink path can trigger a null pointer dereference. A call chain such as:...
RHEL 8 : kernel (RHSA-2025:22752)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22752 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ALSA: usb-audio: ALSA USB Aud...
RockyLinux 8 : container-tools:4.0 (RLSA-2023:6938)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:6938 advisory. go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents CVE-2022-3064 golang: html/template: improper handli...
The vulnerability of the virtio-net component in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the virtio-net component in the Linux operating system is related to mutual locking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...
PT-2025-48819
Name of the Vulnerable Software and Affected Versions AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 Description The software contains an authenticated command injection flaw in the NetFailDetectD binary. This allows attackers to execute arbitrary commands via a crafted input...
The vulnerability of the net/core/gen_estimator.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the net/core/genestimator.c component in the Linux operating system is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the tcf_block_get_ext() function in the net/sched/cls_api.c module of the network/sched subsystem of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the tcfblockgetext function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of components of the Linux operating system’s kernel, net/mlx5, which allows a hacker to cause a service failure
The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to the insufficient use of the assert function. Exploiting this vulnerability allows attackers to cause service failures...
RockyLinux 8 : container-tools:rhel8 (RLSA-2023:6939)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:6939 advisory. go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents CVE-2022-3064 golang: html/template: improper handli...
MAL-2025-191607 Malicious code in coinbase.net.api (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bybitapi.net (NuGet)
--- -= Per source details. Do not edit below this line.=-...