28940 matches found
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Check linkres-hpodplinkenc before using it. WHAT & HOW The functions dpenablelinkPhy and dpdisablelinkPhy can pass linkres without initializing hpodplinkenc. It is necessary to check for null values before...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: netlink: avoided infinite retry loops in netlinkunicast The netlinkattachskb function checks the memory allocation constraints for the socket’s receive buffer. First, it checks whether the newly increased rmem value fits withi...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not allow relocation of partially dropped subvolumes BUG There is an internal report indicating that a balance-related transaction aborted, with the following call trace: item 85 key 594509824 169 0 itemoff 12599 itemsi...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: comedi: das6402: Fixed the bit shift out of bounds issue. When checking for a supported IRQ number, the following test is used: / IRQs 2, 3, 5, 6, 7, 10, 11, 15 are valid for “enhanced” mode / if 1 options1 & 0x8cec However,...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: f2fs: fixed to avoid UAF in f2fssync inodemeta syzbot reported a UAF issue as follows: 1 2 1 https://syzkaller.appspot.com/text?tag=CrashReport&x=16594c60580000 =================================================================...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check the device memory pointer before using it. Add a NULL check before accessing device memory to prevent a crash if the dev-dm allocation in mlx5initonce fails...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed out-of-bounds access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can occur through tail calls. This occurs when two programs each utilize a cgroup local storage with...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that the received length does not exceed the allocated size. In xdplinearizepage, when reading the following buffers from the ring, we forget to check the received length against the actual allocated size. This...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: fs: writeback: Fixed a use-after-free issue in markinodedirty. A use-after-free issue occurred when markinodedirty accessed bdiwriteback, which was in progress during the switch operation. CPU: 1, PID: 562, Comm: systemd-random-N...
CVE-2025-6574
Summary (CVE-2025-6574): The WordPress plugin “Service Finder Bookings” is vulnerable to privilege escalation via account takeover in all versions before 6.1. The issue stems from improper user identity validation before updating account details (e.g., email), enabling authenticated users with su...
OPENSUSE-SU-2025:15678-1 libmozjs-115-0-115.15.0-6.1 on GA media
These are all security issues fixed in the libmozjs-115-0-115.15.0-6.1 package on the GA media of openSUSE Tumbleweed...
IBM DB2 High Performance Unload 安全漏洞
IBM DB2 High Performance Unload is a database data export program from International Business Machines IBM. A security vulnerability exists in IBM DB2 High Performance Unload, which stems from a buffer size calculation error that could cause the program to crash. The following versions are...
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: CVE-2025-50181: Pool managers now properly control redirects when retries is passed bsc1244925 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
DLA-4328-1 linux-6.1 - security update
Bulletin has no description...
WordPress Service Finder Bookings plugin <= 6.0 - Authentication Bypass via User Switch Cookie vulnerability
Authentication Bypass via User Switch Cookie vulnerability discovered by Foxyyy in WordPress Plugin Service Finder Booking versions = 6.0...
Security update for kernel-livepatch-MICRO-6-0_Update_7
This update for kernel-livepatch-MICRO-6-0Update7 fixes the following issues: CVE-2025-38089: sunrpc: handle SVCGARBAGE during svc auth processing as auth error bsc1245509 CVE-2025-38477: net/sched: schqfq: Fix race condition on qfqaggregate bsc1247315 Patch Instructions: To install this SUSE...
EUVD-2021-23306
Malware in sbrugna...
EUVD-2021-22216
Malware in sbrugna...