Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a resource leak in the mt7915ratetxpowerget function...

CVE-2025-55097

In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudiostreamingsamplingget when parsing a descriptor of an USB streaming device...

EUVD-2022-55518

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-50337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling getfunction0 getfunction0 calls...

CVE-2022-50337

The CVE-2022-50337 issue affects the Linux kernel OCXL path: get_function_0() calls pci_get_domain_bus_and_slot(), which returns a PCI device with an incremented refcount. If pci_dev_put() is not called, a refcount leak can occur. The fixes add device reference handling and ensure calls to pci_de...

CVE-2022-50337 ocxl: fix pci device refcount leak when calling get_function_0()

In the Linux kernel, the following vulnerability has been resolved: ocxl: fix pci device refcount leak when calling getfunction0 getfunction0 calls pcigetdomainbusandslot, as comment says, it returns a pci device with refcount increment, so after using it, pcidevput needs be called. Get the devic...

PT-2025-37639

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The get function 0 function in the Linux kernel contains a potential PCI device reference count leak. The function calls pci get domain bus and slot, which increments the reference cou...

PT-2025-44098

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the pinctrl subsystem where the return value of the pinmux ops::get function name function is not adequately checked. The pinmux generic get function...

CVE-2025-9001 LemonOS HTTP Client main.cpp HTTPGet stack-based overflow

A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applications/Steal/main.cpp of the component HTTP Client. The manipulation of the argument chunkSize leads to stack-based buffer overflow. The attack may be...

The vulnerability of the `txopt_get()` function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the txoptget function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Server-Side Request Forgery (SSRF)

Overview mcp-markdownify-server is a Model Context Protocol MCP server that converts various file types and web content to Markdown format. It provides a set of tools to transform PDFs, images, audio files, web pages, and more into easily readable and shareable Markdown text. Affected versions of...

SUSE CVE-2024-52557

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmpdp: Fix integer overflow in zynqmpdprateget This patch fixes a potential integer overflow in the zynqmpdprateget The issue comes up when the expression drmdpbwcodetolinkratedp-test.bwcode 10000 is evaluated using 32-bi...

The vulnerability of the ea_get() function in the JFS file system (fs/jfs/xattr.c) of Linux operating systems allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the eaget function in the JFS file system driver fs/jfs/xattr.c in Linux operating systems is related to incorrect handling of data read from a damaged file system. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cau...

PT-2025-49241

Name of the Vulnerable Software and Affected Versions duc affected versions not specified Description A stack buffer overflow exists in the buffer get function of duc, a disk management tool. A condition can evaluate to true due to underflow, leading to an out-of-bounds read. Recommendations At t...

DEBIAN-CVE-2024-42327

A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is availabl...

Vulnerability of the usb_ep_get() function (hw/net/core.c) in the QEMU hardware emulation software, allowing a hacker to cause a service failure

The vulnerability of the usbepget function hw/net/core.c in the QEMU hardware emulation software is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a attacker to cause a system failure...

PT-2024-41488 · Gnu +1 · Linux +1

Уязвимость функции ea get файловой системы JFS fs/jfs/xattr.c ядра операционных систем Linux связана с некорректной обработкой данных, считываемых с повреждённого образа файловой системы. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информаци...

SUSE CVE-2024-46685

In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcsgetfunction pinmuxgenericgetfunction can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in...

DEBIAN-CVE-2024-46685

In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcsgetfunction pinmuxgenericgetfunction can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in...

AZL-49286 CVE-2024-46685 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcsgetfunction pinmuxgenericgetfunction can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in...