Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates in the processing of buffer mapping operations in the cryptographic driver, which may result in memory corruption...

CVE-2025-47333

CVE-2025-47333 affects Qualcomm chipsets' cryptographic driver, with memory corruption occurring while handling buffer mapping operations. The root cause is a flaw in how the driver manages memory during mapBuffer processing, which may lead to crashes or unpredictable behavior. Exploitation detai...

CVE-2025-47333 Use After Free in HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver...

CVE-2025-47333 Use After Free in HLOS

Memory corruption while handling buffer mapping operations in the cryptographic driver...

PT-2026-1528

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description A memory corruption issue exists when handling buffer mapping operations within the cryptographic driver. The issue involves a flaw in how the driver manages memory, potentially leading to crashes or unexpect...

CVE-2022-50819 udmabuf: Set ubuf->sg = NULL if the creation of sg table fails

In the Linux kernel, the following vulnerability has been resolved: udmabuf: Set ubuf-sg = NULL if the creation of sg table fails When userspace tries to map the dmabuf and if for some reason e.g. OOM the creation of the sg table fails, ubuf-sg needs to be set to NULL. Otherwise, when the userspa...

EUVD-2022-55787

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix DMA transfer direction When CONFIGDMAAPIDEBUG is selected, while running the crypto self test on the QAT crypto algorithms, the function adddmaentry reports a warning similar to the one below, saying that...

EUVD-2025-203631

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix DMA-API usage Use DMA-API dmamapsingle call for getting the DMA address of the transfer buffer instead of hacking with virttophys. This fixes the following DMA-API debug warning: ------------ cut here...

CVE-2025-40356 spi: rockchip-sfc: Fix DMA-API usage

In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix DMA-API usage Use DMA-API dmamapsingle call for getting the DMA address of the transfer buffer instead of hacking with virttophys. This fixes the following DMA-API debug warning: ------------ cut here...

CVE-2025-40276 drm/panthor: Flush shmem writes before mapping buffers CPU-uncached

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached The shmem layer zeroes out the new pages using cached mappings, and if we don't CPU-flush we might leave dirty cachelines behind, leading to potential data leaks...

CVE-2025-40276

CVE-2025-40276 affects the Linux kernel Panthor DRM driver (drivers/gpu/drm/panthor/panthor_gem.c). The vulnerability arises from flushing shmem writes before mapping buffers; shmem currently zeroes new pages using cached mappings and, without a CPU flush, can leave dirty cachelines behind. This ...

EUVD-2019-5268

Malware in sbrugna...

EUVD-2025-23806

Malicious code in bioql PyPI...

EUVD-2025-23808

Malicious code in bioql PyPI...

EUVD-2025-27904

Malicious code in bioql PyPI...

EUVD-2025-26784

Malicious code in bioql PyPI...

SUSE CVE-2025-39857

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix one NULL pointer dereference in smcibissgneedsync BUG: kernel NULL pointer dereference, address: 00000000000002ec PGD 0 P4D 0 Oops: Oops: 0000 1 SMP PTI CPU: 28 UID: 0 PID: 343 Comm: kworker/28:1 Kdump: loaded Tainte...

CVE-2025-39857

CVE-2025-39857 affects the Linux kernel net/smc component and is a NULL pointer dereference in smc_ib_is_sg_need_sync(). The issue occurs when ibdev->dma_device is NULL for the software RoCE device, triggering a kernel crash. A NULL pointer check has been added to prevent the problem. Remediat...

UBUNTU-CVE-2025-38685

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix vmalloc out-of-bounds write in fastimageblit This issue triggers when a userspace program does an ioctl FBIOPUTCON2FBMAP by passing console number and frame buffer number. Ideally this maps console to frame buffer and...

CVE-2025-38685

CVE-2025-38685 affects the Linux kernel fbdev path. The issue arises in vmalloc out-of-bounds write within fast_imageblit when a userspace ioctl (FBIOPUT_CON2FBMAP) maps a console to a framebuffer; if the console resize during mapping fails but the code continues, it can end up updating display s...