Linux Distros Unpatched Vulnerability : CVE-2025-39960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: gpiolib: acpi: initialize acpigpioinfo struct Since commit 7c010d463372 gpiolib: acpi: Make...

The vulnerability of the ufshcd_queuecommand() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ufshcdqueuecommand function in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2025-34084

Mattermost Desktop App versions = 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL...

CVE-2025-62174 Mastodon allows continued access after password reset via CLI

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, when an administrator resets a user account's password via the command-line interface using bin/tootctl accounts modify --reset-password, active sessions and access tokens for...

CVE-2025-58084 Mattermost Desktop App crashes when clicking on malformed external URL

Mattermost Desktop App versions = 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL...

Arbitrary File Write

github.com/usememos/memos is vulnerable to arbitrary file write. The vulnerability is due to improper validation of file paths in the CreateResource endpoint when storing objects locally, which allows an attacker to create files with path traversal sequences and write arbitrary files on the serve...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

Online Hotel Reservation System addslideexec.php file arbitrary file upload vulnerability

Online Hotel Reservation System is an online hotel reservation system. Online Hotel Reservation System has an arbitrary file upload vulnerability that stems from a lack of valid validation of uploaded files by the parameter image in the file /admin/addslideexec.php. No details of the vulnerabilit...

The vulnerability in the crypto/xts.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the crypto/xts.c module of the Linux operating system is related to improper management of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mxm_wmi_call_mx() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mxmwmicallmx function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the ext4_get_group_info() function in the fs/ext4/ext4.h file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4getgroupinfo function in the fs/ext4/ext4.h file of the Ext4 file system in the Linux kernel is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ext4_fc_record_regions() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4fcrecordregions function in the Linux operating system leads to errors when releasing resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver module/driver/infiniband/hw/hfi1/chip.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/infiniband/hw/hfi1/chip.c module of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the arm_smmu_pmu_init() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the armsmmupmuinit function in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the put_pasid_state() function in the drivers/iommu/amd/iommu_v2.c file of the Linux kernel’s IOMMU driver allows a hacker to trigger a service failure.

The vulnerability of the putpasidstate function in the drivers/iommu/amd/iommuv2.c file of the Linux kernel’s IOMMU driver is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the get_default_font() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the getdefaultfont function in the Linux operating system’s kernel is related to an incorrect bitwise shift of a integer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `radeon_atrm_get_bios()` function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the radeonatrmgetbios function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the hpd_rx_irq_create_workqueue() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hpdrxirqcreateworkqueue function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to trigger a service failure...