kernel: ice: Add a per-VF limit on number of FDIR filters

ice in linux kernel permits VF driver to request more than designated limit of FDIR filters, which can lead to resource exhaustion for other VFs...

kernel: sched: sch_cake: fix bulk flow accounting logic for host fairness

In the Linux kernel, the following vulnerability has been resolved: sched: schcake: fix bulk flow accounting logic for host fairness In schcake, we keep track of the count of active bulk flows per host, when running in dst/src host fairness mode, which is used as the round-robin weight when...

kernel: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow In error flow of mlx5tcctentryaddrule, in case ctruleadd callback returns error, zonerule-attr is used uninitiated. Fix it to use attr which has the needed pointer value...

kernel: net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

kernel: net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()

In the Linux kernel, the following vulnerability has been resolved: net/sched: schapi: fix xainsert error path in tcfblockgetext This command: $ tc qdisc replace dev eth0 ingressblock 1 egressblock 1 clsact Error: block dev insert failed: -EBUSY. fails because user space requests the same block...

kernel: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()

in linux kernel bluetooth L2CAP, l2capleflowctlinit can cause both div-by-zero and an integer overflow since hdev-lemtu may not fall in the valid range...

BIT-GITLAB-2025-0549 Authentication Bypass Using an Alternate Path or Channel in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. A security vulnerability allows attackers to bypass Device OAuth flow protections, enabling authorization form submission through...

Intel Tiber Edge Platform Edge Orchestrator 安全漏洞

Intel Tiber Edge Platform Edge Orchestrator is an enterprise-class edge computing orchestration management platform from Intel Corporation USA. A security vulnerability exists in Intel Tiber Edge Platform Edge Orchestrator that stems from insufficient control flow management and could lead to...

PT-2025-21072 · Intel · Intel Tiber Edge Platform Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: IntelR Tiber™ Edge Platform Edge Orchestrator affected versions not specified Description: The issue is related to insufficient control flow management in some Edge Orchestrator software for IntelR Tiber™ Edge Platform. This may allow a...

PT-2025-21064 · Intel · Intel Xeon 6 Processor E-Cores Firmware

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processor E-Cores firmware affected versions not specified Description: The issue is related to insufficient control flow management in the Alias Checking Trusted Module. This may allow a privileged user to potentially enable...

OZI-publish 安全漏洞

OZI-publish is an OZI Project open source project. A security vulnerability exists in OZI-publish versions 1.13.2 through 1.13.5, which stems from untrusted data flowing into the PR creation logic and could lead to the execution of arbitrary code...

Self-Supervised Transformer-Based Contrastive Learning for Intrusion Detection Systems

As the digital landscape becomes more interconnected, the frequency and severity of zero-day attacks, have significantly increased, leading to an urgent need for innovative Intrusion Detection Systems IDS. Machine Learning-based IDS that learn from the network traffic characteristics and can...

SUSE CVE-2025-37888

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5createinner,ttctable Add NULL check for mlx5getflownamespace returns in mlx5createinnerttctable and mlx5createttctable to prevent NULL pointer dereference...

UBUNTU-CVE-2025-0549

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. A security vulnerability allows attackers to bypass Device OAuth flow protections, enabling authorization form submission through...

CVE-2025-0549

CVE-2025-0549 affects GitLab CE/EE: all versions from 17.3 up to 17.9.8, 17.10 up to 17.10.6, and 17.11 up to 17.11.2, are vulnerable. The issue allows attackers to bypass Device OAuth flow protections and submit authorization forms with minimal user interaction. The available documents do not sp...

CVE-2025-0549 Authentication Bypass Using an Alternate Path or Channel in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. A security vulnerability allows attackers to bypass Device OAuth flow protections, enabling authorization form submission through...

CVE-2025-0549 Authentication Bypass Using an Alternate Path or Channel in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. A security vulnerability allows attackers to bypass Device OAuth flow protections, enabling authorization form submission through...

CVE-2025-20972

Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration...

CVE-2025-20971

Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow...

DEBIAN-CVE-2025-37888

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5createinner,ttctable Add NULL check for mlx5getflownamespace returns in mlx5createinnerttctable and mlx5createttctable to prevent NULL pointer dereference...