41400 matches found
AZL-75345 CVE-2025-39949 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: qed: Don't collect too many protection override GRC elements In the protection override dump path, the firmware can return far too many GRC elements, resulting in attempting to write past the end of the previously-kmalloc'ed dump...
AZL-75336 CVE-2025-39942 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: verify remainingdatalength respects maxfragmentedrecvsize This is inspired by the check for dataoffset + datalength...
AZL-68141 CVE-2025-39946 affecting package kernel for versions less than 6.6.112.1-1
In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket to buffer up the whole record before we service it. If the socket has a tiny buffer, however, we read out the data sooner, to prevent...
AZL-68129 CVE-2025-39934 affecting package kernel for versions less than 6.6.112.1-1
In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpcclient device,...
AZL-68135 CVE-2025-39938 affecting package kernel for versions less than 6.6.112.1-1
In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed If earlier opening of source graph fails e.g. ADSP rejects due to incorrect audioreach topology, the graph is closed and "daidata-graphdai-id" is...
AZL-75333 CVE-2025-39937 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer Since commit 7d5e9737efda "net: rfkill: gpio: get the name and type from device property" rfkillfindtype gets called with the possibly uninitialized "const...
AZL-68132 CVE-2025-39929 affecting package kernel for versions less than 6.6.112.1-1
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirectrecvio leak in smbdnegotiate error path During tests of another unrelated patch I was able to trigger this error: Objects remaining on kmemcacheshutdown...
EUVD-2025-32425
MacForge contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root.This issue affects MacForge: 1.2.0 Beta 1...
MacForge 安全漏洞
MacForge is an open source plugin for macEnhance. A security vulnerability exists in MacForge version 1.2.0 Beta 1, which stems from an insecure XPC service that could lead to elevated privileges...
EUVD-2022-47576
Malicious code in bioql PyPI...
EUVD-2025-24565
Malicious code in bioql PyPI...
EUVD-2025-9790
Malicious code in bioql PyPI...
EUVD-2023-29459
Malicious code in bioql PyPI...
EUVD-2024-44808
Malicious code in bioql PyPI...
EUVD-2024-32701
Malicious code in bioql PyPI...
EUVD-2024-27318
Malicious code in bioql PyPI...
EUVD-2022-42288
Malicious code in bioql PyPI...
EUVD-2025-2216
Malicious code in bioql PyPI...