22 matches found
scorecard
OpenSSF Scorecard...
coreruleset
Rama| Estado ---|--- main| 🛡️ OWASP CRS...
ROS-20260922-73-0042
The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the TLS protocol implementation in the Linux operating system is related to incorrect access to elements of the structure. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...
ROS-20260922-73-0047
The vulnerability of the dwc2hcdurbdequeue function in the driver module/dwc2/hcd.c of the Linux operating system’s USB device driver framework is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...
ROS-20260922-73-0049
The vulnerability of the ip6parsetlv function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...
ROS-20260918-73-0120
The vulnerability of the scarlett2usbgetconfig function in the sound/usb/mixerscarlett2.c module, which supports USB audio devices in Linux operating systems, is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the function ieee80211_invoke_fast_rx() in the module net/mac80211/rx.c, part of the mac80211 stack in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the function ieee80211invokefastrx in the net/mac80211/rx.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the amdgpu_hmm_range_get_pages() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c driver for the Direct Rendering Infrastructure (DRI) of AMD GPU cores in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the amdgpuhmmrangegetpages function in the drivers/gpu/drm/amd/amdgpu/amdgpuhmm.c driver for the Direct Rendering Infrastructure DRI of AMD GPUs in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an...
The vulnerability of the biovec_phys_mergeable() function in the block/blk.h module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the biovecphysmergeable function in the block/blk.h module of the Linux kernel is related to an incorrect definition of its internal state. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the make_task_dead() function in the kernel/exit.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the maketaskdead function in the kernel/exit.c module of the Linux operating system’s kernel relates to the simultaneous release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the pressure_write() function in the kernel/cgroup/cgroup.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pressurewrite function in the Linux kernel/cgroup/cgroup.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the net/netfilter/nft_set_pipapo_avx2.c module of the Linux kernel’s netfilter component, which allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the net/netfilter/nftsetpipapoavx2.c module of the Linux kernel’s netfilter component is related to a violation of expected behavior. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the...
ROS-20260826-73-0007
The vulnerability of the txmacroputdecenum function in the sound/soc/codecs/lpass-tx-macro.c module related to the Linux operating system’s SoC audio support is associated with out-of-buffer writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...
The vulnerability of the amdgpu_amdkfd_submit_ib() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c driver for AMD GPU cores in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the amdgpuamdkfdsubmitib function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfd.c driver for AMD GPU cores in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerabilities of the functions nft_rbtree_gc_elem() and __nft_rbtree_insert() in the module net/netfilter/nft_set_rbtree.c of the netfilter component of the Linux operating system’s kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functions nftrbtreegcelem and nftrbtreeinsert in the net/netfilter/nftsetrbtree.c module of the netfilter component of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the...
Malicious code in @zalastax/nolb-cii (npm)
The package @zalastax/nolb-cii was found to contain malicious code...
MAL-2025-10911 Malicious code in @zalastax/nolb-cii (npm)
The package @zalastax/nolb-cii was found to contain malicious code...
SUSE SLED12 / SLES12 Security Update : libseccomp (SUSE-SU-2019:2941-1)
This update for libseccomp fixes the following issues : Update to new upstream release 2.4.1 : Fix a BPF generation bug where the optimizer mistakenly identified duplicate BPF code blocks. Updated to 2.4.0 bsc1128828 CVE-2019-9893: Update the syscall table for Linux v5.0-rc5 Added support for the...
NCIIPC: It's Time to Step Forward And Protect Our Critical Infrastructures from Cyber Attacks
The IT threat landscape has changed dramatically over the last three-four years. With no shortage of threat actors, from hacktivists to nation-states, criminals to terrorists, all of them are now after something new. It's no more just about stealing your money, credit cards and defacing websites,...