Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from failure to properly handle work queue failures, which could lead to a resource leak...

PT-2025-34387

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability involves a missing detach ioas operation in the vfio/pds component of the Linux kernel. This issue occurs when CONFIG IOMMUFD is enabled and a device is bound to the...

The vulnerability of the Apache Commons FileUpload library, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the Apache Commons FileUpload library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the read_headers() function in the cpp-httplib library allows a hacker to cause a service failure.

The vulnerability of the readheaders function in the cpp-httplib library is related to an uncontrolled resource consumption during the processing of headers. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of the software for the Hitachi Energy MicroSCADA X SYS600 system, related to errors in using standard permissions, allows a perpetrator to trigger a maintenance failure.

The vulnerability of the software used in the Hitachi Energy MicroSCADA X SYS600 equipment management system is related to errors in the use of standard permissions. Exploiting this vulnerability could allow an intruder to cause maintenance failures...

The vulnerability of the online business analytics service IBM Cognos Analytics, related to unlimited resource distribution, allows a perpetrator to cause a service failure.

The vulnerability of the online business analytics service IBM Cognos Analytics lies in its unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending a specially crafted request...

The vulnerability in the net/ethtool/netlink.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/ethtool/netlink.c component of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the distribution and transaction performance-enhancement software in the Apache Seata microservice architecture arises from incorrect processing of highly compressed input data. This allows attackers to cause service failures.

The vulnerability of distribution software and the inability to improve transaction performance in the Apache Seata microservices architecture is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the Apache Tomcat application server, related to unlimited resource allocation, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the `of_bcm_voter_get()` function in the `drivers/interconnect/qcom/bcm-voter.c` module of the Linux operating system allows a hacker to gain access to protected information or cause a service failure.

The vulnerability of the ofbcmvoterget function in the drivers/interconnect/qcom/bcm-voter.c module of the Linux kernel is related to security configuration errors. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the ptp_ocp_probe() function in the drivers/ptp/ptp_ocp.c kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ptpocpprobe function in the drivers/ptp/ptpocp.c kernel module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow a attacker to cause service failures...

Vulnerability of the zr364xx_start_readpipe() function in the drivers/media/usb/zr364xx/zr364xx.c file – This driver provides support for multimedia devices in the Linux operating system. It can be exploited by attackers to cause service failures.

Vulnerability of the zr364xxstartreadpipe function in the drivers/media/usb/zr364xx/zr364xx.c module – The Linux kernel’s multimedia device driver has a vulnerability related to improper memory release before deleting the last pointer memory leak. Exploiting this vulnerability could allow an...

Vulnerability of the mwifiex_uninit_sw() function in the drivers/net/wireless/marvell/mwifiex/main.c module – This driver is part of the Linux kernel’s wireless adapter support mechanism; it allows a hacker to cause a service failure.

Vulnerability of the mwifiexuninitsw function in the drivers/net/wireless/marvell/mwifiex/main.c module – The Linux wireless adapter support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Ruby interpreter’s Rack module’s interface allows a hacker to trigger a service failure.

The vulnerability of the Ruby interpreter’s Rack module interface is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Understanding Content Moderation Policies and User Experiences in Generative AI Products

While recent research has focused on developing safeguards for generative AI GAI model-level content safety, little is known about how content moderation to prevent malicious content performs for end-users in real-world GAI products. To bridge this gap, we investigated content moderation policies...

SoK: Stablecoin Designs, Risks, and the Stablecoin LEGO

Stablecoins have become significant assets in modern finance, with a market capitalization exceeding USD 246 billion May 2025. Yet, despite their systemic importance, a comprehensive and risk-oriented understanding of crucial aspects like their design trade-offs, security dynamics, and...

Qilin Ransomware Adds "Call Lawyer" Feature to Pressure Victims for Larger Ransoms

The threat actors behind the Qilin ransomware-as-a-service RaaS scheme are now offering legal counsel for affiliates to put more pressure on victims to pay up, as the cybercrime group intensifies its activity and tries to fill the void left by its rivals. The new feature takes the form of a "Call...

A week with a "smart" car

Welcome to this week's edition of the Threat Source newsletter. June 9 was Whit Monday -- a bank holiday here in Germany -- so I decided to take the whole week off. It turned out to be the perfect opportunity to try out a brand new car. Little did I know, I was about to get a crash course in mode...

CVE-2022-50091

In the Linux kernel, the following vulnerability has been resolved: locking/csdlock: Change csdlockdebug from earlyparam to setup The csdlockdebug kernel-boot parameter is parsed by the earlyparam function csdlockdebug. If set, csdlockdebug invokes staticbranchenable to enable csdlockwait feature...