The vulnerability in the `drivers/gpu/drm/amd/pm/swsmu/smu_internal.h` file of the amdgpu driver in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the drivers/gpu/drm/amd/pm/swsmu/smuinternal.h file of the amdgpu driver in the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

python311-nltk-3.9.4-1.1 on GA media (moderate)

python311-nltk-3.9.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10461-1 Rating: moderate Cross-References: CVE-2026-33230 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

The vulnerability of the sma1307 Setting_Loaded() function in the sound/soc/codecs/sma1307.c module of the Linux operating system’s SoC audio support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sma1307settingloaded function in the sound/soc/codecs/sma1307.c module, which is part of the Linux operating system’s audio support for SoC cores, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious...

The vulnerability of the recv_done() function in the fs/smb/client/smbdirect.c module of the SMB client kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the recvdone function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux kernel, is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, an...

The vulnerability of the mt7921_check_offload_capability() function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the Mediatek wireless communication adapter driver for the Linux operating system, which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt7921checkoffloadcapability function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the Mediatek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

The vulnerability of the damos_new_filter() function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the damosnewfilter function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the mhi_init_mmio() function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux kernel exposes the confidentiality, integrity, and accessibility of protected information to be compromised by attackers.

The vulnerability of the mhiinitmmio function in the drivers/bus/mhi/host/init.c file of the MHI bus driver for Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

CVE-2025-67807

The human resources system Sage DPW (version 2025_06_004 ) is vulnerable to account enumeration due to a flaw in its login mechanism. The system provides distinct responses for valid and invalid usernames, which allows an attacker to identify existing accounts. This behavior specifically affects ...

The vulnerability of the smbddestroy() function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the smbddestroy function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux kernel, stems from the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability allows a...

The vulnerability of the iavf_alloc_q_vectors() function in the drivers/net/ethernet/intel/iavf/iavf_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iavfallocqvectors function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

The vulnerability of the eventHistTriggerParse() function in the kernel/trace/traceEventsHist.c module, which supports Linux operating system kernel tracing, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the eventHistTriggerParse function in the kernel/trace/traceEventsHist.c module, which supports kernel tracing in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the sdma_v4_0_sw_fini() function in the driver/gpu/drm/amd/amdgpu/sdma_v4_0.c source code of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sdmav40swfini function in the driver/gpu/drm/amd/amdgpu/sdmav40.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could...

OPENSUSE-SU-2026:10472-1 conftest-0.67.1-2.1 on GA media

These are all security issues fixed in the conftest-0.67.1-2.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the hci_cs_disconnect() function in the net/bluetooth/hci_event.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hcicsdisconnect function in the net/bluetooth/hcievent.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the bond_xmit_hash() function in the drivers/net/bonding/bond_main.c file of the Linux kernel’s network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bondxmithash function in the drivers/net/bonding/bondmain.c file of the Linux kernel’s network device driver is related to a data processing error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the graph_util_parse_dai() function in the sound/soc/generic/simple-card-utils.c module of the Linux operating system’s SoC audio support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the graphutilparsedai function in the sound/soc/generic/simple-card-utils.c module of the Linux operating system’s sound support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

OPENSUSE-SU-2026:10473-1 dnsdist-2.0.3-1.1 on GA media

These are all security issues fixed in the dnsdist-2.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the rtw_core_deinit() function in the drivers/net/wireless/realtek/rtw88/main.c file of the Realtek wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rtwcoredeinit function in the drivers/net/wireless/realtek/rtw88/main.c file of the Realtek wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability in the function iwl_mvm_mld_send_key() of the drivers/net/wireless/intel/iwlwifi/mvm/mld-key.c file of the Intel wireless network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iwlmvmmldsendkey function in the drivers/net/wireless/intel/iwlwifi/mvm/mld-key.c file of the Intel wireless driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an...

The vulnerability of the __sev_firmware_shutdown() function in the drivers/crypto/ccp/sev-dev.c driver of the Linux kernel’s cryptographic accelerator module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sevfirmwareshutdown function in the drivers/crypto/ccp/sev-dev.c file of the Linux kernel cryptographic accelerator driver involves the assignment of a null pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the...