20793 matches found
powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
...
Large RSA keys can cause high CPU usage in crypto/tls
...
arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
...
cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
...
RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
...
ice: arfs: fix use-after-free when freeing @rx_cpu_rmap
...
cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost
...
bpf: Fix kmemleak warning for percpu hashmap
...
Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file
...
cpufreq: CPPC: Add u64 casts to avoid overflowing
...
netfilter: flowtable_offload: fix using __this_cpu_add in preemptible
...
SUSE-SU-2025:03052-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20250812 release bsc1248438 - CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable...
CVE-2025-7405 Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not...
VulnCheck KEV: CVE-2025-38352
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel If an exiting non-autoreaping task has already passed exitnotify and calls handleposixcputimers from IRQ, it can be reaped by its parent or debugger rig...
ASB-A-425282960
In runposixcputimers of posix-cpu-timers.c, there is a possible way to trigger a use-after-free on a sigqueue object due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Linux Distros Unpatched Vulnerability : CVE-2025-38518
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish Family 17h, Model 47h, Stepping 0h h...
Linux Distros Unpatched Vulnerability : CVE-2025-38610
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powercap: dtpmcpu: Fix NULL pointer dereference in getpdpoweruw The getpdpoweruw function ca...
Linux Distros Unpatched Vulnerability : CVE-2025-38506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: Allow CPU to reschedule while setting per-page memory attributes When running an SEV-SN...
BIT-VAULT-2025-6203 Vault unauthenticated denial of service through complex json payload
A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault’s auditing subroutine, potentially resulting in the Vault server to become...
Linux Distros Unpatched Vulnerability : CVE-2024-10307
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab EE/CE affecting all versions from 12.10 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. A maliciously crafte...