The vulnerability of the ufshcd_mcq_abort() function in the drivers/ufs/core/ufs-mcq.c kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ufshcdmcqabort function in the drivers/ufs/core/ufs-mcq.c kernel of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions scmi_cpufreq_get_rate() and cpufreq_cpu_get_raw() in the Linux operating system allow a hacker to trigger a service failure.

The vulnerabilities of the scmicpufreqgetrate and cpufreqcpugetraw functions in the Linux operating system are related to pointer arithmetic errors. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to synchronization errors when using shared resources, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mtk_pmic_keys_lp_reset_setup() function in the mtk-pmic-keys.c component of the Linux kernel allows a hacker to induce a system failure.

The vulnerability of the mtkpmickeyslpresetsetup function in the mtk-pmic-keys.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the dev.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the dev.c component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the parisc component in the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the parisc component in the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the ip_vs_xmit.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the ipvsxmit.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the iommu_copy_struct_from_user() function in the iommu component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the iommucopystructfromuser function in the iommu component of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel microchip component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel microchip component is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a hacker to trigger a failure in the system’s authentication process.

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a perpetrator to cause a system failure...

The vulnerability of the task_stack.h component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the taskstack.h component in the Linux operating system’s kernel is related to state management errors. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability in the `arch/x86/mm/tlb.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the arch/x86/mm/tlb.c component of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the io_uring/net component in the Linux operating system’s kernel, which allows a hacker to cause a service failure.

The vulnerability of the iouring/net component in the Linux operating system’s kernel is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

Vulnerabilities of components such as Ethernet, AMD, and PDS_Core in the Linux operating system’s kernel, which allow a hacker to trigger a service failure.

The vulnerability of components such as Ethernet, AMD, and PDSCore in the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Linux operating system’s USB kernel component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s USB kernel component is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-10868 Business Logic Errors in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs...

CVE-2025-1396

WSO2 username enumeration vulnerability (CVE-2025-1396) occurs when Multi-Attribute Login is enabled across multiple WSO2 products. The login flow returns a distinct error message for non-existing usernames, enabling observers to determine valid user IDs. Impact includes potential for targeted br...

GitLab 17.4 < 18.2.7 / 18.3 < 18.3.3 / 18.4 < 18.4.1 (CVE-2025-10868)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Business Logic Errors in GitLab CVE-2025-10868 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

PyTorch 安全漏洞

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a security vulnerability that stems from the bitwiserightshift function mishandling the boundary value of the OTHER parameter, which can be exploited by an attacker to cause an output error...