23856 matches found
Intel OFU 安全漏洞
Intel OFU is a flash update application from Intel Corporation USA. A security vulnerability exists in Intel OFU versions prior to 14.1.31, which stems from improperly set default permissions and could result in elevated privileges...
Intel® OFU Software Advisory
Summary: Potential security vulnerabilities for some Intel® One Boot Flash Update Intel® OFU software may allow escalation of privilege. Intel is not releasing updates to mitigate these potential vulnerabilities and has issued a product discontinuation notice for Intel® OFU software. Vulnerabilit...
Intel OFU 代码问题漏洞
Intel OFU is a flash update application from Intel Corporation USA. A code issue vulnerability exists in Intel OFU versions prior to 14.1.31, which stems from an uncontrolled search path that could lead to elevation of privilege...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989419)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989419 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid format-overflow warning With gcc and W=1 option, there's a warning like this:...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988656)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988656 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix memory leak in pm8001chipfwflashupdatereq In pm8001chipfwflashupdatebuild, if...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990342)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990342 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix f2fsbugon when uninstalling filesystem call f2fsevictinode. creating a large files duri...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989204)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989204 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: don't leak PM reference in error path If gpminfcapplytimings fails, the PM...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988914)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988914 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on curseg-alloctype As Wenqing Liu reported in bugzilla:...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989219)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989219 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on totaldatablocks As Yanming reported in bugzilla:...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988972)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988972 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: remove WARNON in f2fsisvalidblkaddr Syzbot triggers two WARNs in f2fsisvalidblkaddr and...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989799)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989799 advisory. In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check for inline inode Yanming reported a kernel bug in Bugzilla kernel 1,...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: msm: Certain pins are marked as invalid for interrupts. On some platforms, the UFS-reset pin has no interrupt logic in TLMM, but it is still registered as a GPIO in the kernel. This allows the user-space to trigger...
Penetrating the Hostile: Detecting DeFi Protocol Exploits through Cross-Contract Analysis
Decentralized finance DeFi protocols are crypto projects developed on the blockchain to manage digital assets. Attacks on DeFi have been frequent and have resulted in losses exceeding $80 billion. Current tools detect and locate possible vulnerabilities in contracts by analyzing the state changes...
Exploit for CVE-2025-57428
My security advisories CVE-2025-57428 - Telnet debug interf...
f2fs: fix to avoid overflow while left shift operation
...
Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices NULL Pointer Dereference (CVE-2021-44879)
In gcdatasegment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a movedatapage NULL pointer dereference. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...
CVE-2025-40077 f2fs: fix to avoid overflow while left shift operation
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operation Should cast type of folio-index from pgofft to lofft to avoid overflow while left shift operation...
CVE-2025-40077
CVE-2025-40077 is a Linux kernel/FP (F2FS) related fix: the issue was an overflow risk during a left shift involving folio->index. The described root cause is casting folio->index from pgoff_t to loff_t to prevent overflow, with the correction implemented in f2fs code paths. The connected O...
Linux Distros Unpatched Vulnerability : CVE-2025-40077
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to avoid overflow while left shift operation Should cast type of folio-index from pgofft to lofft to avoid overflow while left shift operation...
