30163 matches found
CVE-2025-38062
In the Linux kernel, the following vulnerability has been resolved: genirq/msi: Store the IOMMU IOVA directly in msidesc instead of iommucookie The IOMMU translation for MSI message addresses has been a 2-step process, separated in time: 1 iommudmapreparemsi: A cookie pointer containing the IOVA...
CVE-2025-38064
In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on deviceshutdown Hongyu reported a hang on kexec in a VM. QEMU reported invalid memory accesses during the hang. Invalid read at addr 0x102877002, size 2, region 'null', reason: rejected...
CVE-2025-38046
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
RHSA-2025:9203 Red Hat Security Advisory: Satellite 6.16.5.2 Async Update
Bulletin has no description...
CVE-2025-38079 crypto: algif_hash - fix double free in hash_accept
In the Linux kernel, the following vulnerability has been resolved: crypto: algifhash - fix double free in hashaccept If accept2 is called on socket type algifhash with MSGMORE flag set and cryptoahashimport fails, sk2 is freed. However, it is also freed in afalgrelease, leading to...
CVE-2025-38064
The CVE-2025-38064 entry concerns the Linux kernel virtio subsystem, specifically virtio-console, where devices continue to write to MMIO after the underlying virtio-pci device is reset, causing hangs in kexec-in-VM scenarios. The issue is mitigated by the kernel fix that breaks all virtio device...
CVE-2025-38064 virtio: break and reset virtio devices on device_shutdown()
In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on deviceshutdown Hongyu reported a hang on kexec in a VM. QEMU reported invalid memory accesses during the hang. Invalid read at addr 0x102877002, size 2, region 'null', reason: rejected...
CVE-2025-38058 __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final mntput from sync umount - raising mntcount after umount2 has verified that victim is not busy, but before it has set MNTSYNCUMOUNT; in...
CVE-2025-38058
CVE-2025-38058 affects the Linux kernel: the function __legitimize_mnt() in fs/namespace.c mis-handled synchronization around MNT_SYNC_UMOUNT, risking an incorrect mnt_count handling and a dropped reference to the caller after umount(2) checks but before MNT_SYNC_UMOUNT is set. The issue is resol...
GHSA-22V5-Q59J-H85M vulnerabilities
Vulnerabilities for packages: chromium...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager (CVE-2025-21587, CVE-2025-30698, CVE-2025-4447)
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition used by IBM Tivoli System Automation Application Manager. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote attacke...
SUSE-SU-2025:01990-1 Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: - Security issues fixed: CVE-2023-45288: Require Go = 1.23 for building bsc1236516 CVE-2025-22870: Bump golang.org/x/net to version 0.39.0 bsc1238686 - Version was updated to 2.53.4 with the following bug fixes:...
GHSA-22V5-Q59J-H85M vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X573-8WX6-VHF4 vulnerabilities
Vulnerabilities for packages: chromium...
Tracking GPTs Third Party Service: Automation, Analysis, and Insights
ChatGPT has quickly advanced from simple natural language processing to tackling more sophisticated and specialized tasks. Drawing inspiration from the success of mobile app ecosystems, OpenAI allows developers to create applications that interact with third-party services, known as GPTs. GPTs ca...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ksoftirqd boost timing and iteration issues in rcutorture...
PT-2025-25801 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the x86/sev component. The issue occurs when kdump is running makedumpfile to generate vmcore and dump SNP guest memor...
Veeam Backup and Replication 12.x < 12.3.2.3617 Multiple Vulnerabilities (June 2025) (KB4743)
The version of Veeam Backup and Replication installed on the remote Windows host is 12.x prior to 12.3.2.3617. It is, therefore, affected by multiple vulnerabilities: - A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user. CVE-2025-23121 - A...
PT-2025-25925
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A space cache corruption and potential double allocation issue has been identified in the Linux kernel. The issue arises from a race between caching free space for a block group and...