CVE-2025-8045: Use After Free

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from...

CVE-2025-6349: Use After Free

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver...

CVE-2025-11156

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

CVE-2025-11156

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

PT-2025-48334

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

The vulnerability of the Kernel Driver component of the NVIDIA GPU Display Driver software allows a hacker to cause a system failure.

The vulnerability of the Kernel Driver component of the NVIDIA GPU Display Driver software-related software driver is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2025-58407

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine...

PT-2026-4481

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the idpf Intel Data Plane Framework driver related to handling resets. Specifically, the issue arises from insufficient protection of the reset pa...

TencentOS Server 4: kernel (TSSA-2025:0348)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0348 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

ROS-20251117-01

A vulnerability in the NVIDIA display driver is related to NULL pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the Guest driver and Virtual GPU Manager components of the NVIDIA GPU driver is related to pointer...

The vulnerability of the amdgpupci_error_detected() function in the driver/gpu/drm/amd/amdgpu/amdgpu_device.c file of the Linux operating system’s AMD GPU kernel support module allows a malicious actor to cause a service failure.

The vulnerability of the amdgpupcierrordetected function in the driver/gpu/drm/amd/amdgpu/amdgpudevice.c file of the Direct Rendering Infrastructure DRI support driver for AMD GPU cores in the Linux operating system is related to improper resource locking. Exploiting this vulnerability can allow ...

The vulnerability in the mac80211_hwsim_beacon() function of the drivers/net/wireless/mac80211_hwsim.c module of the Linux kernel driver for wireless adapter support allows a hacker to cause a service failure.

The vulnerability of the mac80211hwsimbeacon function in the drivers/net/wireless/mac80211hwsim.c module of the Linux wireless adapter driver support module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-58407: Time-of-check Time-of-use (TOCTOU) Race Condition

Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine...

The vulnerability of the `coretempremove_core()` function in the `drivers/hwmon/coretemp.c` driver for monitoring Linux kernel equipment allows a attacker to cause a service failure.

The vulnerability of the coretempremovecore function in the drivers/hwmon/coretemp.c file, a driver for monitoring the Linux kernel, is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the __mdiobus_register() function in the drivers/net/phy/mdio_bus.c module of the Linux kernel-based network adapter driver framework allows a attacker to cause a service failure.

The vulnerability of the mdiobusregister function in the drivers/net/phy/mdiobus.c module of the Linux kernel-based network adapter driver framework is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attack...

The vulnerability of the ksz_switch_remove() function in the drivers/net/dsa/microchip/ksz_common.c file of the DSA kernel support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the kszswitchRemove function in the drivers/net/dsa/microchip/kszcommon.c file of the DSA kernel support driver for the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the wilc_wlan_init() function in the drivers/net/wireless/microchip/wilc1000/wlan.c file of the Microchip driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information in Linux operating system-based devices.

The vulnerability of the wilcwlaninit function in the drivers/net/wireless/microchip/wilc1000/wlan.c file of the Microchip Linux kernel driver for wireless adapter support is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the hfi1_ipoib_txreq_init() function in the drivers/infiniband/hw/hfi1/ipoib_tx.c module of the Linux operating system’s InfiniBand driver allows a attacker to cause a service failure.

The vulnerability of the hfi1ipoibtxreqinit function in the drivers/infiniband/hw/hfi1/ipoibtx.c module of the Linux kernel’s InfiniBand support driver is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the msm_edp_ctrl_power() function in the drivers/gpu/drm/msm/edp/edp_ctrl.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the msmedpctrlpower function in the drivers/gpu/drm/msm/edp/edpctrl.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernel, is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the __alloc_range() function in the drivers/gpu/drm/drm_buddy.c module – The DRI driver for Linux’s kernel, which allows attackers to compromise the integrity of protected information.

Vulnerability of the allocrange function in the drivers/gpu/drm/drmbuddy.c module – The DRI driver for Linux’s kernel-based direct rendering infrastructure is vulnerable due to insufficient handling of exceptional conditions. Exploiting this vulnerability could allow an attacker to compromise the...