CVE-2025-68328 firmware: stratix10-svc: fix bug in saving controller data

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix bug in saving controller data Fix the incorrect usage of platformsetdrvdata and devsetdrvdata. They both are of the same data and overrides each other. This resulted in the rmmod of the svc driver to...

CVE-2025-68334

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Add support for Van Gogh SoC The ROG Xbox Ally non-X SoC features a similar architecture to the Steam Deck. While the Steam Deck supports S3 s2idle causes a crash, this support was dropped by the Xbox Ally...

CVE-2025-68328

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix bug in saving controller data Fix the incorrect usage of platformsetdrvdata and devsetdrvdata. They both are of the same data and overrides each other. This resulted in the rmmod of the svc driver to...

The vulnerability of the blk_should_throtl() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the blkshouldthrotl function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __sk_dst_get() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the skdstget function in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __wrap_pthread_create() function in the Libcap library allows a malicious actor to cause a service failure.

The vulnerability of the wrappthreadcreate function in the Libcap library is related to the lack of memory release after the effective lifetime of the function. Exploiting this vulnerability could allow an attacker to trigger a service failure through a specially crafted request...

The vulnerability of the EMACS text editor’s MIME protocol implementation allows a hacker to induce a service failure.

The vulnerability of the EMACS text editor’s MIME protocol implementation lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a perpetrator to cause service failures...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from insufficient support for Van Gogh SoCs in the amd/pmc driver, which could result in the device failing to ha...

The vulnerability of the pid_nr_ns() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pidnrns function in the Linux operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ip6_xmit() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ip6xmit function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __dm_suspend() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dmsuspend function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the kvmalloc() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kvmalloc function in the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the tls_strp_msg_hold() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the tlsstrpmsghold function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the regcomp function in the system library glibc, which allows a hacker to cause a service failure

The vulnerability of the regcomp function in the glibc system library is related to the repeated release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted request...

PT-2026-38956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the dm driver, the failure to implement its own timeout handler while relying on slave devices leads to an issue where requests are leaked and never completed if an io-timeout-fail...

CVE-2025-66500 Foxit webplugins.foxit.com Stored Cross-Site Scripting via postMessage Vulnerability

A stored cross-site scripting XSS vulnerability exists in webplugins.foxit.com. A postMessage handler fails to validate the message origin and directly assigns externalPath to a script source, allowing an attacker to execute arbitrary JavaScript when a crafted postMessage is received...

PT-2026-26121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the admin tagset is not released if initialization fails during NVMe/FC controller creation. Specifically, the nvme fabrics component creates an...

The vulnerability of GNUPlot’s plotting software, related to the manipulation of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of GNUPlot’s graph creation software relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the GraphicsMagick graphic editor, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the GraphicsMagick graphic editor is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the dcn201_acquire_free_pipe_for_layer() function in the drivers/gpu/drm/amd/display/dc/dcn201/dcn201_resource.c driver module allows a hacker to trigger a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support for AMD graphics cards in Linux operating systems.

The vulnerability of the dcn201acquirefreepipeforlayer function in the drivers/gpu/drm/amd/display/dc/dcn201/dcn201resource.c driver module relates to the pointer manipulation in the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems. Exploiting this...