The vulnerability in the crypto/xts.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the crypto/xts.c module of the Linux operating system is related to improper management of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the put_pasid_state() function in the drivers/iommu/amd/iommu_v2.c file of the Linux kernel’s IOMMU driver allows a hacker to trigger a service failure.

The vulnerability of the putpasidstate function in the drivers/iommu/amd/iommuv2.c file of the Linux kernel’s IOMMU driver is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the get_default_font() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the getdefaultfont function in the Linux operating system’s kernel is related to an incorrect bitwise shift of a integer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the arm_smmu_pmu_init() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the armsmmupmuinit function in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver module/driver/infiniband/hw/hfi1/chip.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/infiniband/hw/hfi1/chip.c module of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `radeon_atrm_get_bios()` function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the radeonatrmgetbios function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the hpd_rx_irq_create_workqueue() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hpdrxirqcreateworkqueue function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Linux Distros Unpatched Vulnerability : CVE-2023-53619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: conntrack: Avoid nfcthelperhash uses after free If nfconntrackinitstart fails for example due to a registernfconntrackbpf failure, the...

CVE-2025-2140 IBM Engineering Requirements Management Doors Next spoofing

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data...

RHEL 9 : kernel (RHSA-2025:17734)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17734 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netsched: hfsc: Fix a potenti...

RHEL 9 : kernel-rt (RHSA-2025:17735)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17735 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

OESA-2025-2387 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability ma...

OESA-2025-2386 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability ma...

quic-go: Panic occurs when queuing undecryptable packets after handshake completion

Summary A misbehaving or malicious server can trigger an assertion in a quic-go client and crash the process by sending a premature HANDSHAKEDONE frame during the handshake. Impact A misbehaving or malicious server can cause a denial-of-service DoS attack on the quic-go client by triggering an...

The vulnerability of the function within the __bpf_async_init() module in the kernel/bpf/helpers.c file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the function within the bpfasyncinit module in the kernel/bpf/helpers.c file of the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

RockyLinux 9 : mod_http2 (RLSA-2025:14983)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:14983 advisory. httpd: modproxyhttp2: untrusted input from a client causes an assertion to fail in the Apache modproxyhttp2 module CVE-2025-49630 Tenable has extracted the...

SUSE CVE-2025-39956

In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igcprobe on LED setup error When igcledsetup fails, igcprobe fails and triggers kernel panic in freenetdev since unregisternetdev is not called. 1 This behavior can be tested using fault-injection framework,...

UBUNTU-CVE-2025-39960

In the Linux kernel, the following vulnerability has been resolved: gpiolib: acpi: initialize acpigpioinfo struct Since commit 7c010d463372 "gpiolib: acpi: Make sure we fill struct acpigpioinfo", uninitialized acpigpioinfo struct are passed to acpifindgpio and later in the call stack info-quirks ...

EUVD-2025-33327

In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igcprobe on LED setup error When igcledsetup fails, igcprobe fails and triggers kernel panic in freenetdev since unregisternetdev is not called. 1 This behavior can be tested using fault-injection framework,...

CVE-2025-39960

Concrete details from connected sources show CVE-2025-39960 affecting the Linux kernel gpiolib/acpi path. The root cause is uninitialized acpi_gpio_info passed to __acpi_find_gpio(), leading to info->quirks usage in acpi_populate_gpio_lookup and breaking i2c_hid_cpi HID over I2C probes. The fi...