GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: vault-fips, prometheus-mysqld-exporter-fips, agentbeat-fips, openfga-fips, mattermost-fips, trillian-fips, k3s, step-kms-plugin-fips, sops, seaweedfs, crossplane-provider-sql, prometheus-mysqld-exporter, rekor, step, db-operator, spire-server-fips, mariadb-operator,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: k3s, telegraf, openbao, wolfictl, sqlexporter, timestamp-authority, certificate-transparency, ksops, temporal-server, dgraph, amass, flux-kustomize-controller, gitsign, temporal, minio, nri-mysql, nuclei, terragrunt, step, dbmate, openfga, kubeflow-pipelines,...

CVE-2026-23008

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix KMS with 3D on HW version 10 HW version 10 does not have GB Surfaces so there is no backing buffer for surface backed FBs. This would result in a nullptr dereference and crash the driver causing a black screen...

CVE-2020-7233

KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOORNAME variable in the BCLogon.swf file...

Linux Distros Unpatched Vulnerability : CVE-2022-50875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of: overlay: fix null pointer dereferencing in finddupcsetnodeentry and finddupcsetprop When kmalloc fail to allocate memory in kasprintf, fn1 or fn2 will be...

Unity Linux 20.1060e Security Update: kernel (UTSA-2025-992581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992581 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drmclientmodesetprobe When a new mode is set to modeset-mode, the...

Linux Distros Unpatched Vulnerability : CVE-2023-54263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/nouveau/kms/nv50-: init hpdirqlock for PIOR DP Fixes OOPS on boards with ANX9805 DP encoders. CVE-2023-54263 Note that Nessus relies on the presence of the...

SUSE CVE-2023-54138

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on irq uninstall In case of early initialisation errors and on platforms that do not use the DPU controller, the deinitilisation code can be called with the kms pointer set to NULL. Patchwork:...

EUVD-2025-203794

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing WHAT IGT kmscursorlegacy's long-nonblocking-modeset-vs-cursor-atomic fails with NULL pointer dereference. This can be reproduced with both an eDP panel and a DP monitors connected. BUG...

AZL-72622 CVE-2025-68286 affecting package kernel for versions less than 6.6.119.3-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing WHAT IGT kmscursorlegacy's long-nonblocking-modeset-vs-cursor-atomic fails with NULL pointer dereference. This can be reproduced with both an eDP panel and a DP monitors connected. BUG...

UBUNTU-CVE-2025-68286

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing WHAT IGT kmscursorlegacy's long-nonblocking-modeset-vs-cursor-atomic fails with NULL pointer dereference. This can be reproduced with both an eDP panel and a DP monitors connected. BUG...

Linux Distros Unpatched Vulnerability : CVE-2025-68286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Check NULL before accessing WHAT IGT kmscursorlegacy's long-nonblocking-modeset-vs- cursor-atomic fails with NULL pointer dereference. This can...

UBUNTU-CVE-2023-53837

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on snapshot tear down In case of early initialisation errors and on platforms that do not use the DPU controller, the deinitilisation code can be called with the kms pointer set to NULL. Patchwork:...

SUSE CVE-2025-40152

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix bootup splat with separategpudrm modparam The drmgemforeachgpuvmbo call from lookupvma accesses drmgemobj.gpuva.list, which is not initialized when the drm driver does not support DRIVERGEMGPUVA feature. Enable it fo...

EUVD-2025-124931

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix bootup splat with separategpudrm modparam The drmgemforeachgpuvmbo call from lookupvma accesses drmgemobj.gpuva.list, which is not initialized when the drm driver does not support DRIVERGEMGPUVA feature. Enable it fo...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the msmkms driver not initializing drmgemobj.gpuva.list, which could lead to a null pointer dereference...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, aws-sigv4-proxy, conftest, terraform-provider-azapi, nats, oras, certificate-transparency, incert, kubernetes-csi-livenessprobe, gcsfuse, kubebuilder, chartmuseum, cluster-api-helm-controller, go-bindata, wazero, sonobuoy,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: terraform-provider-azapi, velero-plugin-for-csi, nats, certificate-transparency, incert, supercronic, gcsfuse, dgraph, kubernetes-event-exporter, nsc, kiali, dbmate, wire-go, mods, undock, scorecard, terraform, iptables-wrappers, harbor, checksec, terraform-docs,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, aws-sigv4-proxy, conftest, terraform-provider-azapi, velero-plugin-for-csi, nats, oras, certificate-transparency, incert, kubernetes-csi-livenessprobe, gcsfuse, kubebuilder, chartmuseum, cluster-api-helm-controller,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, aws-sigv4-proxy, conftest, terraform-provider-azapi, velero-plugin-for-csi, nats, oras, certificate-transparency, incert, kubernetes-csi-livenessprobe, gcsfuse, kubebuilder, chartmuseum, cluster-api-helm-controller,...