CVE-2025-71094 net: usb: asix: validate PHY address before use

In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from the USB device via asixreadphyaddr. A malicious or faulty device can return an invalid address = PHYMAXADDR, which causes a warning in...

CVE-2025-71094 net: usb: asix: validate PHY address before use

In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from the USB device via asixreadphyaddr. A malicious or faulty device can return an invalid address = PHYMAXADDR, which causes a warning in...

CVE-2025-68793

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job-pasid access race in gpu recovery Avoid a possible UAF in GPU recovery due to a race between the sched timeout callback and the tdr work queue. The gpu recovery function calls drmschedstop and later...

CVE-2025-68793

CVE-2025-68793 affects the Linux kernel’s AMDGPU GPU recovery path. The issue is a race between the sched timeout callback and the tdr work queue during gpu recovery, where drm_sched_start() can resume the tdr queue and later free a job, risking a use-after-free on the pasid if the timeout comple...

n8n: Webhook Node IP Whitelist Bypass via Partial String Matching

Impact The Webhook node’s IP whitelist validation performed partial string matching instead of exact IP comparison. As a result, an incoming request could be accepted if the source IP address merely contained the configured whitelist entry as a substring. This issue affected instances where...

GHSA-W96V-GF22-CRWP n8n: Webhook Node IP Whitelist Bypass via Partial String Matching

Impact The Webhook node’s IP whitelist validation performed partial string matching instead of exact IP comparison. As a result, an incoming request could be accepted if the source IP address merely contained the configured whitelist entry as a substring. This issue affected instances where...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: Do not repeatedly call pteoffsetmaplock until success. DAMON’s virtual address space operation implementation vaddr calls pteoffsetmaplock within the page table walk callback function. This is necessary for readin...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in QEMU, specifically in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size of virtqueuepush, as defined in virtioscsicompletereq, virtioblkreqComplete, and viritocryptoreqComplete, might be larger than the actual size of the data that has been sent to the gues...

vlc:vlc-demux-dec-libfuzzer-mp4: Crash in MP4_TrackSeek

Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6684624020635648 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mp4 Job Type: aflasanvlc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff7fff Crash State:...

openbabel:fuzz_convert: Container-overflow in ___interceptor_strtol

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6283059409518592 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address:...

CVE-2024-58340

creationtimestamp| type| source ---|---|--- 2026-01-13 02:16:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcbiegwuie2x 2026-03-15 11:48:44+00:00| seen| https://gist.github.com/ragettostudio/85f4f660c32a41c3af0771080e11b64b 2026-03-15 12:22:13+00:00| seen|...

PT-2026-2559

n8n is an open source workflow automation platform. From 1.36.0 to before 2.2.0, the Webhook node’s IP whitelist validation performed partial string matching instead of exact IP comparison. As a result, an incoming request could be accepted if the source IP address merely contained the configured...

PT-2026-2631

Name of the Vulnerable Software and Affected Versions NETGEAR WiFi range extenders affected versions not specified Description A path traversal issue exists in NETGEAR WiFi range extenders. An attacker with LAN authentication can access the router's IP address and review the contents of the...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a contention condition for job-pasid access during GPU recovery, which could lead to reuse after release...

Linux Distros Unpatched Vulnerability : CVE-2025-71094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from t...

CVE-2025-71094: Improper Input Validation

In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from the USB device via asixreadphyaddr. A malicious or faulty device can return an invalid address = PHYMAXADDR, which causes a warning in...

Linux Distros Unpatched Vulnerability : CVE-2025-71084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the C...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the asixreadphyaddr function not validating the PHY address, which could lead to invalid address usage...

Lares 4.0 cmdOk.xml Arbitrary URL Redirect

The vulnerability in the cmdOk.xml script of the “Smart Home” system Lares 4.0 involves redirecting the URL to an unreliable website when processing the redirectPage parameter. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address...

MiracleLinux 8 : compat-openssl10-1.0.2o-4.el8_10.1 (AXSA:2025-9952:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-9952:01 advisory. openssl: X.400 address type confusion in X.509 GeneralName CVE-2023-0286 Tenable has extracted the preceding description block directly from the MiracleLinux...