694 matches found
RLSA-2025:20518 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...
Hitachi ABB AFS Use After Free (CVE-2023-0215)
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This plugin only works wi...
Hitachi ABB Power Grids AFS Series Loop with Unreachable Exit Condition (CVE-2020-9307)
AFS660/AFS665 Version 7.0.07 are affected by a denial of service vulnerability. An unauthenticated, adjacent attacker can cause an infinite loop on one of the HSR ring ports of the device. This effectively breaks the redundancy of the HSR ring. If the attacker can perform the same attack on a...
Hitachi ABB AFS Double Free (CVE-2022-4450)
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This plugin only works wi...
Malicious code in aviah-afs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf89fc6b8dbc13d2c79e5b68ea691b56fcc64a7d3ef34b172adaa002ff0f945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in avminh-afs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018d15fbf9a482a2e882124e01c25af3e57fbe5dce6995b5dfa0c2a919893e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-153449 Malicious code in avminh-afs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018d15fbf9a482a2e882124e01c25af3e57fbe5dce6995b5dfa0c2a919893e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990522)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990522 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't accou...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989612)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989612 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't accou...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988788)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988788 advisory. In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afsgetattr consult the server didn't accou...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the afsputserver function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux Distros Unpatched Vulnerability : CVE-2025-40010
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix potential null pointer dereference in afsputserver afsputserver accessed server-debugid before the NULL check, which could lead to a null pointer...
CVE-2025-40010
In the Linux kernel, the following vulnerability has been resolved: afs: Fix potential null pointer dereference in afsputserver afsputserver accessed server-debugid before the NULL check, which could lead to a null pointer dereference. Move the debugid assignment, ensuring we never dereference a...
CVE-2025-40010
Technical details for CVE-2025-40010 are not publicly available in the provided documents. Monitor for updates from vendors/security advisories.
CVE-2025-40010 afs: Fix potential null pointer dereference in afs_put_server
In the Linux kernel, the following vulnerability has been resolved: afs: Fix potential null pointer dereference in afsputserver afsputserver accessed server-debugid before the NULL check, which could lead to a null pointer dereference. Move the debugid assignment, ensuring we never dereference a...
CVE-2025-40010: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: afs: Fix potential null pointer dereference in afsputserver afsputserver accessed server-debugid before the NULL check, which could lead to a null pointer dereference. Move the debugid assignment, ensuring we never dereference a...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a null pointer not being properly checked in the afsputserver function, which could lead to a null pointer...
