Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsimdrvprobe when nsimdevresourcesregister failed CVE-2022-50500 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use rawsmpprocessorid instead of...

CVE-2025-54970

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service fails to authenticate requests. In some configurations, this may allow remote or local users to abort jobs or read information without the permissions of the job owner...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to improper blocking of resources. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Incomplete Cleanup (CVE-2024-49851)

tpm: Clean up TPM space after command failure tpmdevtransmit prepares the TPM space before attempting command transmission. However if the command fails no rollback of this preparation is done. This can result in transient handles being leaked if the device is subsequently closed with no further...

PT-2025-43990

Name of the Vulnerable Software and Affected Versions BAE SOCET GXP versions prior to 4.6.0.2 Description The SOCET GXP Job Status Service does not properly authenticate requests. This can allow remote or local users to perform actions, such as aborting jobs or reading information, without the...

EUVD-2025-36207

An issue was discovered in BAE SOCET GXP before 4.6.0.2. The SOCET GXP Job Status Service fails to authenticate requests. In some configurations, this may allow remote or local users to abort jobs or read information without the permissions of the job owner...

The vulnerability of the block component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the block component in the Linux operating system’s kernel is related to a memory leak in the biocopyuseriov function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to unlimited resource distribution, allows a hacker to cause a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of components related to DRM/AMDKFD in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the DRM/amdkfd components of the Linux operating system’s kernel is related to incorrect blocking in the mutexunlock function. Exploiting this vulnerability can allow a perpetrator to trigger a service failure...

The vulnerability of the sw_mode_config() function in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the swmodeconfig function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-54970

BAE Systems SOCET GXP prior to version 4.6.0.2 contains a vulnerability in the Job Status Service where requests are not authenticated. In affected configurations, remote or local users may abort jobs or read information without the job owner’s permissions. The issue is documented across multiple...

CVE-2025-60982

IDOR vulnerability in Educare ERP 1.0 2025-04-22 allows unauthorized access to sensitive data via manipulated object references. Affected endpoints do not enforce proper authorization checks, allowing authenticated users to access or modify data belonging to other users by changing object...

strongSwan -- Heap-based buffer overflow in eap-mschapv2 plugin due to improper handling of failure request packets

Xu Biang reports: The eap-mschapv2 plugin doesn't correctly check the length of an EAP-MSCHAPv2 Failure Request packet on the client, which can cause an integer underflow that leads to a crash and, depending on the compiler options, even a heap-based buffer overflow that's potentially exploitable...

The vulnerability of the __generic_file_write_iter() function in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the genericfilewriteiter function in the Linux operating system is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SIMATIC Devices Operation on a Resource after Expiration or Release (CVE-2024-57929)

In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dmarraycursorend When dmbmreadlock fails due to locking or checksum errors, it releases the faulty block implicitly while leaving an invalid output pointer behind. The caller ...

Siemens SIMATIC ET 200SP Communication Processors Missing Authentication For Critical Function (CVE-2025-40771)

Affected devices do not properly authenticate configuration connections. This could allow an unauthenticated remote attacker to access the configuration data. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900...

Linux Distros Unpatched Vulnerability : CVE-2022-50577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ima: Fix memory leak in imainodehash Commit f3cc6b25dcc5 ima: always measure and audit files...

The vulnerability of the wait_event_timeout() function in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the waiteventtimeout function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the hns3 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the hns3 component in the Linux operating system’s kernel is related to incorrect initialization of resources in the functions hclgeinitaedev and hclgecommcmduninit. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of DRM/VC4 components in the Linux operating system’s kernel allows a perpetrator to trigger a service failure.

The vulnerability of the DRM/VC4 components in the Linux operating system’s kernel is related to memory management errors that occur after memory is freed in functions like vc4preparefb and vc4cleanupfb. Exploiting this vulnerability can allow an attacker to cause a service failure...