EUVD-2025-31854

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. Performing manipulation of the argument page results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and...

CVE-2022-50540 dmaengine: qcom-adm: fix wrong sizeof config in slave_config

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom-adm: fix wrong sizeof config in slaveconfig Fix broken slaveconfig function that uncorrectly compare the peripheralsize with the size of the config pointer instead of the size of the config struct. This cause the...

EUVD-2021-13157

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987094 advisory. In the Linux kernel, the following vulnerability has been resolved: net: lltemac: Make sure to free skb when it is completely used With the skb pointer piggy-backed ...

CVE-2023-53607 ALSA: ymfpci: Fix BUG_ON in probe function

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: Fix BUGON in probe function The snddmabuffer.bytes field now contains the aligned size, which this sndBUGON did not account for, resulting in the following: 9.625915 ------------ cut here ------------ 9.633440...

CVE-2023-53567 spi: qup: Don't skip cleanup in remove's error path

In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a...

CVE-2023-53539

The CVE-2023-53539 entry refers to a Linux kernel issue in RDMA/rxe (rxe_requester) where the state save/restore missed part of the wqe’s DMA state, causing corruption of DMA state on packet resend after an IP-drop. The fix corrects how the wqe and DMA struct state are saved/restored, enabling sa...

EUVD-2025-32401

In the Linux kernel, the following vulnerability has been resolved: smb: client: let smbddestroy call disableworksync&info-postsendcreditswork In smbddestroy we may destroy the memory so we better wait until postsendcreditswork is no longer pending and will never be started again. I actually just...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to clean up DMA resources in the wrong path, which could lead to a permanent memory leak...

PT-2025-40709

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s SPI QUP component where cleanup operations are skipped during the removal process if an error occurs. Specifically, the issue arises from returning...

PT-2025-40662

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.19.161-mlnx.47.gadcd9e3 1 Description The Linux kernel contained a flaw in the RDMA/core subsystem where the 'ib port' structure was not properly validated before accessing a sysfs node. This could lead to a...

EUVD-2022-55395

Malicious code in bioql PyPI...

EUVD-2023-36951

Malicious code in bioql PyPI...

EUVD-2023-58484

Malicious code in bioql PyPI...

EUVD-2023-41115

Malicious code in bioql PyPI...

EUVD-2025-30343

Malicious code in bioql PyPI...

EUVD-2022-54906

Malicious code in bioql PyPI...

EUVD-2023-47509

Malicious code in bioql PyPI...

CVE-2025-39897

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaenginedescgetmetadataptr which can return an error pointer and lead to potential crashes or undefined behaviour if the...

A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.

...