17003 matches found
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly detecting user read permissions, which could lead to a system call bypass...
CVE-2025-22419
In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...
CVE-2025-38723
CVE-2025-38723 concerns the Linux kernel, specifically LoongArch BPF tailcall handling. The issue arises in the tailcall jump offset calculation when bpf_int_jit_compile() fails to initialize the JIT context, leaving out_offset = -1. Consequently, the computed jmp_offset = (out_offset - cur_offse...
Access Control Bypass
github.com/external-secrets/external-secrets is vulnerable to Access Control Bypass. The vulnerability is due to missing namespace selector in List calls for Secret and SecretStore resources, allowing attackers to exfiltrate secrets across the cluster...
rxrpc: Fix bug due to prealloc collision
...
rxrpc: Fix recv-recv race of completed call
...
bpf: Prevent tailcall infinite loop caused by freplace
...
Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall
...
firmware: qcom: scm: smc: Handle missing SCM device
...
Denial of Service through Data corruption in gRPC-C++
...
bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
...
net/mlx5e: Don't call cleanup on profile rollback failure
...
ksmbd: fix use-after-free in ksmbd_session_rpc_open
...
VulnCheck KEV: CVE-2025-42957
SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a miscalculation of the jump offset in the LoongArch architecture BPF tail call, which could lead to a soft...
SUNRPC: fix a memleak in gss_import_v2_context
...
In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).
...
netfs: Only call folio_start_fscache() one time for each folio
...
CVE-2025-21026
Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call...
CVE-2025-21026
CVE-2025-21026 affects Samsung Mobile and Android environments via ImsService. The root cause is improper handling of insufficient permissions, enabling a local attacker to interrupt calls on affected builds prior to SMR Sep-2025 Release 1. The vulnerability spans ImsService code paths and is mit...