6061 matches found
RISC Zero Underconstrained Vulnerability: Division
Two issues were found: For some inputs to signed integer division, the circuit allowed two outputs, only one of which was valid. Additionally, the result of division by zero was underconstrained. This vulnerability was identified using the Picus tool from Veridise. Impacted on-chain verifiers hav...
Linux 6.9 AF_UNIX MSG_OOB Handling Use-After-Free
Linux versions starting at 6.9 have a security bug in the handling of MSGOOB, which causes use-after-free read+write when a sequence of syscalls is executed...
Linux Distros Unpatched Vulnerability : CVE-2025-38153
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, courtesy of syzbot, identified an error see report 1 in aqc111 driver, caused by incomplete...
CVE-2025-8109
Software installed and run as a non-privileged user may conduct ptrace system calls to issue writes to GPU origin read only memory...
CVE-2025-8109 GPU DDK - GPU shader shared memory corrupted using ptrace to disrupt GPU operation
Software installed and run as a non-privileged user may conduct ptrace system calls to issue writes to GPU origin read only memory...
PT-2025-31807 Ā· Softwarex Ā· Softwarex
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: Software installed and run as a non-privileged user may conduct ptrace system calls to issue writes to GPU origin read-only memory. Recommendations: At the moment, there is no information...
Local Privilege Escalation
github.com/linuxdeepin/lastore-daemon is vulnerable to Local Privilege Escalation. The vulnerability is due to insecure D-Bus configuration due to allowing users in the sudo group to invoke the InstallPackage method without authentication, enabling arbitrary code execution as root via crafted .de...
CVE-2025-41241
VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this vulnerability to create a denial-of-service condition...
PT-2025-33544
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: An out-of-bounds access issue exists in cgroup local storage within the Linux kernel. This can be triggered via tail calls between two BPF programs utilizing cgroup local storage with...
PT-2025-31362
Name of the Vulnerable Software and Affected Versions Amazon Q Developer Visual Studio Code VS Code extension version 1.84.0 Description The Amazon Q Developer Visual Studio Code VS Code extension v1.84.0 contains injected code intended to call the Q Developer CLI. This code executes upon extensi...
CVE-2025-41241
VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this vulnerability to create a denial-of-service condition...
CVE-2025-41241 Denial-of-service vulnerability
VMware vCenter contains a denial-of-service vulnerability. A malicious actor who is authenticated through vCenter and has permission to perform API calls for guest OS customisation may trigger this vulnerability to create a denial-of-service condition...
CVE-2025-41241
CVE-2025-41241 is a denial-of-service vulnerability in VMware vCenter. An authenticated attacker with permission to perform API calls for guest OS customization can trigger a DoS condition. CVSSv3 base score 4.4 (AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). Remediation outlined by VMSA/Broadcom: patch t...
PT-2025-31196
Name of the Vulnerable Software and Affected Versions: VMware vCenter affected versions not specified Description: VMware vCenter contains a denial-of-service vulnerability. An authenticated malicious actor with permission to perform API calls for guest OS customization may trigger this issue,...
Server-Side Request Forgery (SSRF)
Apache Ranger is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper input validation due to the Edit Service Page in the UI allowing crafted requests that can trigger unintended internal or external network calls...
Polkadot Frontier 代ē é®é¢ę¼ę“
Polkadot Frontier is a Polkadot EVM open source application that provides a compatibility layer for Ether VMs. A code issue vulnerability exists in versions of Polkadot Frontier prior to 0822030, which stems from a CallableByContract implementation error that could lead to improperly precompiled...
CVE-2025-38459 atm: clip: Fix infinite recursive call of clip_push().
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix infinite recursive call of clippush. syzbot reported the splat below. 0 This happens if we call ioctlATMARPMKIP more than once. During the first call, clipmkip sets clippush to vcc-push, and the second call copies ...
CVE-2025-38354
In the Linux kernel, the following vulnerability has been resolved: drm/msm/gpu: Fix crash when throttling GPU immediately during boot There is a small chance that the GPU is already hot during boot. In that case, the call to ofdevfreqcoolingregister will immediately try to apply devfreq cooling,...
OESA-2025-1880 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bpf: consider that tail calls invalidate packet pointers Tail-called programs could execute any of the helpers that invalidate packet pointers. Hence,...
