The vulnerability of the BPF_CALL_2() function in the net/core/filter.c module allows a hacker to compromise the privacy, integrity, and accessibility of the protected information within the Linux operating system’s kernel network functions.

The vulnerability of the BPFCALL2 function in the net/core/filter.c module related to Linux’s kernel network functions involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the lpfcdebugfs_lockstat_write() function in the drivers/scsi/lpfc/lpfcdebugfs.c driver of the Linux SCSI device kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lpfcdebugfslockstatwrite function in the drivers/scsi/lpfc/lpfcdebugfs.c driver for Linux SCSI devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the hidp_set_timer() function in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hidpsettimer function in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

CVE-2026-25963

Fleet is open source device management software. In versions prior to 4.80.1, a broken authorization check in Fleet’s certificate template deletion API could allow a team administrator to delete certificate templates belonging to other teams within the same Fleet instance. Fleet supports...

The vulnerability of the igb_alloc_q_vector() function in the drivers/net/ethernet/intel/igb/igb_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the igballocqvector function in the drivers/net/ethernet/intel/igb/igbmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the qla2x00_terminate_rport_io() function in the drivers/scsi/qla2xxx/qla_attr.c file of the Linux SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qla2x00terminaterportio function in the drivers/scsi/qla2xxx/qlaattr.c file of the Linux SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the mpi3mr_soft_reset_handler() function in the drivers/scsi/mpi3mr/mpi3mr_fw.c file of the Linux SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mpi3mrsoftresethandler function in the drivers/scsi/mpi3mr/mpi3mrfw.c file of the Linux SCSI device driver module is related to accessing memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the load_balance() function in the kernel/sched/fair.c module of the Linux operating system’s resource management support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the loadbalance function in the kernel/sched/fair.c module of the Linux operating system’s resource management support module is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `brcmfmac/core.c` function in the Broadcom wireless adapter driver framework of the `drivers/net/wireless/broadcom/brcm80211` module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the brcmfmac/core.c function in the Broadcom wireless adapter driver’s drivers/net/wireless/broadcom/brcm80211/brcmfmac module in the Linux operating system kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacke...

The vulnerability of the fpdt_process_subtable() function in the drivers/acpi/acpi_fpdt.c file of the ACPI driver (an extended configuration and power management interface of the Linux kernel) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fpdtprocesssubtable function in the drivers/acpi/acpifpdt.c file of the ACPI driver an extended configuration and power management interface of the Linux kernel is related to the use of an incorrect address. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the rxrpc_wait_to_be_connected() function in the net/rxrpc/sendmsg.c module, which supports RxRPC session sockets in Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxrpcwaittobeconnected function in the net/rxrpc/sendmsg.c module, which supports RxRPC session sockets in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the...

CVE-2024-36319

Debug code left active in AMD's Video Decoder Engine Firmware VCN FW could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system...

CVE-2023-31324

A Time-of-check time-of-use TOCTOU race condition in the AMD Secure Processor ASP could allow an attacker to modify External Global Memory Interconnect Trusted Agent XGMI TA commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability...

Advisory ROSA-SA-2026-3182

Software: sqlite 3.26.0 OS: ROSA Virtualization 3.0 unaffected versions = sqlite-3.26.0-20.rv30 affected versions sqlite-3.26.0-20.rv30 CVE-ID: CVE-2025-6965 BDU-ID: 2025-08786 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Aggregate Term Handler component of the SQLite database management syst...

CVE-2024-36319

Debug code left active in AMD's Video Decoder Engine Firmware VCN FW could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system...

CVE-2023-31323

Type confusion in the AMD Secure Processor ASP could allow an attacker to pass a malformed argument to the External Global Memory Interconnect Trusted Agent XGMI TA leading to a memory safety violation potentially resulting in loss of confidentiality, integrity, or availability...

CVE-2024-36319

Debug code left active in AMD's Video Decoder Engine Firmware VCN FW could allow a attacker to submit a maliciously crafted command causing the VCN FW to perform read/writes HW registers, potentially impacting confidentiality, integrity and availabilability of the system...

CVE-2024-36320

Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability...

PT-2026-7589

Integer Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write potentially leading to loss of confidentiality, integrity and availability...

The vulnerabilities of the functions virtio_queue_rqs() and virtblk_poll() in the drivers/block/virtio_blk.c module of the Linux kernel’s block devices driver allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions virtioqueuerqs and virtblkpoll in the drivers/block/virtioblk.c module of the Linux kernel’s block devices driver are related to the reutilization of previously released memory. Exploiting these vulnerabilities could allow an attacker to compromise the...