26513 matches found
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: f2fs: fixed by removing the unnecessary f2fsbugon function to avoid panics. The verifyblkaddr function will trigger a panic once we introduce a fault into f2fsisvalidblkaddr; this unnecessary f2fsbugon function has been remove...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: f2fs: We can avoid a panic if the extenttree is not created. This patch prevents the following panics: pc: lookupextenttree+0xd8/0x760 lr: f2fsdowritedatapage+0x104/0x87c sp: ffffffc010cbb3c0 x29: ffffffc010cbb3e0 x28:...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Remove the SCSI host only if it has been added. If the host attempts to remove the ufshcd driver from a UFS device, a kernel panic will occur if the ufshcdasyncscan function fails during ufshcdprobehba. This issu...
Number withdrawal
BYD Atto3 is a pure electric compact SUV produced by BYD Corporation of China. The BYD Atto3 has a security vulnerability. This vulnerability allows attackers to obtain permanently valid authentication keys through brute-force attacks, enabling them to perform flash memory operations on the ECUs...
EUVD-2025-209899
In BYD Atto3, an attacker can obtain an authentication key through Brute Force attack, which is permanently available. The authentication key enables flash to the Electronic Parking Break EPB and Supplemental Restoration System SRS related ECUs...
WS-2021-0211
Linux/kernel in versions v5.10-rc1--v5.12 is vulnerable to memory leak of object flash...
SUSE CVE-2026-43415
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix SError in ufshcdrtcwork during UFS suspend In ufshcdwlsuspend, canceldelayedworksync is called to cancel the UFS RTC work, but it is placed after ufshcdvopssuspendhba, pmop, POSTCHANGE. This creates a race...
CVE-2026-31254
The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 2025-13-04 contains a code injection vulnerability CWE-94 in its training script. The script registers the Python eval function as a Hydra configuration resolver under the name eval. This allows configuration files t...
finetuning-scheduler (0.1.2), gts-engine (>=0.1.1, <=0.1.2) +3 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.6.2)
pytorch-lightning PYPI version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - finetuning-scheduler 0.1.2 - gts-engine =0.1.1, =0.3.3, =0.1.0, =0.1.5 Source cves: CVE-2026-31221 Source advisory:...
lightning-flash (>=0.1.0, <=0.2.1) potentially affected by CVE-2026-31221 via pytorch-lightning (1.2.0rc0)
pytorch-lightning PYPI version 1.2.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - lightning-flash =0.1.0, =0.2.1 Source cves: CVE-2026-31221 Source advisory: OSV:GHSA-75M9-98V2-HJPM...
SUSE CVE-2025-71299
In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsing The recent refactoring of where runtime PM is enabled done in commit f1eb4e792bb1 "spi: spi-cadence-quadspi: Enable pm runtime earlier to avoid imbalance"...
GHSA-7G5W-PQ96-8C5W flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism
The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 2025-13-04 contains an insecure deserialization vulnerability CWE-502 in its checkpoint loading mechanism. The loadcheckpoint function in checkpoint.py and the checkpoint loading code in eval.py use...
Arbitrary Code Injection
Overview flash-attn is a Flash Attention: Fast and Memory-Efficient Exact Attention Affected versions of this package are vulnerable to Arbitrary Code Injection via the loadcheckpoint function and checkpoint loading process. An attacker can achieve arbitrary code execution by supplying a...
scpert (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-31253 via flash-attn (0.2.8)
flash-attn PYPI version 0.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on flash-attn and may be impacted: - scpert =0.1.0, =0.1.1 Source cves: CVE-2026-31253 Source advisory: OSV:GHSA-7G5W-PQ96-8C5W...
ctopt (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-31253 via flash-attn (1.0.4)
flash-attn PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on flash-attn and may be impacted: - ctopt =0.1.0, =0.1.2 Source cves: CVE-2026-31253 Source advisory: OSV:GHSA-7G5W-PQ96-8C5W...
ochat (3.1.0) potentially affected by CVE-2026-31253 via flash-attn (1.0.9)
flash-attn PYPI version 1.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on flash-attn and may be impacted: - ochat 3.1.0 Source cves: CVE-2026-31253 Source advisory: OSV:GHSA-7G5W-PQ96-8C5W...
airoboros (>=2.1.6, <=2.2.1), bhasa (>=0.1.0, <=0.1.1) +19 more potentially affected by CVE-2026-31253 via flash-attn (>=2.0.8, <=2.8.3)
flash-attn PYPI version =2.0.8, =2.1.6, =0.1.0, =0.1.0, =0.0.5, =0.1.0, =0.2.0rc2, =0.0.1, =0.3.6.post1, =0.1.8, =0.0.1.post1, =0.0.2 and more Source cves: CVE-2026-31253 Source advisory: OSV:GHSA-7G5W-PQ96-8C5W...
airoboros (>=2.1.6, <=2.2.1), bhasa (>=0.1.0, <=0.1.1) +19 more potentially affected by CVE-2026-31253 via flash-attn (>=2.0.8, <=2.8.3)
flash-attn PYPI version =2.0.8, =2.1.6, =0.1.0, =0.1.0, =0.0.5, =0.1.0, =0.2.0rc2, =0.0.1, =0.3.6.post1, =0.1.8, =0.0.1.post1, =0.0.2 and more Source cves: CVE-2026-31253 Source advisory: GHSA-7G5W-PQ96-8C5W...
CVE-2026-31253
The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 2025-13-04 contains an insecure deserialization vulnerability CWE-502 in its checkpoint loading mechanism. The loadcheckpoint function in checkpoint.py and the checkpoint loading code in eval.py use...