kernel: NFSD: Limit the number of concurrent async COPY operations

A flaw was found in the Linux kernel's Network File System Daemon NFSD. An attacker can exploit this by initiating an unlimited number of concurrent asynchronous copy operations. This can lead to resource exhaustion and a Denial of Service DoS condition, making the system unresponsive to legitima...

kernel: signal: restore the override_rlimit logic

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS by exhausting the pending signal queue limit. Due to an issue where resource limits are enforced unconditionally even for signals intended to override them, the kernel fails to allocate necessary resources when...

kernel: afs: Fix the maximum cell name length

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes, but a problem occurs if someone actually does that: kafs tries to create a directory under /proc/net/afs/ with the name o...

kernel: filemap: Fix bounds checking in filemap_read()

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS due to improper bounds checking in the file mapping subsystem. When a read operation is initiated with a file position near the upper limit of the file system and a read length that overflows that boundary, the...

kernel: udmabuf: change folios array from kmalloc to kvmalloc

A flaw was found in the Linux kernel's udmabuf driver. This vulnerability allows a local user to cause a denial of service DoS by requesting large buffer allocations. Because the driver relies on physically contiguous memory allocations with strict size limits, requesting buffers that exceed kern...

kernel: Input: uinput - reject requests with unreasonable number of slots

A flaw was found in the Linux kernel's uinput interface. A local user could exploit this vulnerability by attempting to set up a uinput device with an unreasonably large number of slots. This action triggers a memory allocation failure, which can place a significant burden on the system,...

kernel: hwmon: (lm95234) Fix underflows seen when writing limit attributes

No description is available for this CVE...

kernel: hwmon: (adc128d818) Fix underflows seen when writing limit attributes

A flaw was found and resolved in the Linux kernel. DIVROUNDCLOSEST after kstrtol results in an underflow if a large negative number such as -9223372036854775808 is provided by the user...

kernel: hwmon: (w83627ehf) Fix underflows seen when writing limit attributes

This CVE has been marked as Rejected by the assigning CNA...

USN-7507-1 ruby-rack vulnerabilities

It was discovered that Rack incorrectly handled deleted rack sessions. An attacker could possibly use this issue to expose sensitive information or to gain unauthorized access to user accounts. CVE-2025-32441 It was discovered that Rack incorrectly limited the number of parameters in a web reques...

Device Admin App Certificates and Keys Module Arbitrary File Write

The vulnerability of the Certificates and Keys module in the Device Admin app of the ctrlX OS operating system is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to write arbitrary files by sending specially crafted HTTP...

SUSE CVE-2022-49911

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: enforce documented limit to prevent allocating huge memory Daniel Xu reported that the hash:net,iface type of the ipset subsystem does not limit adding the same network with different interfaces to a set, which...

CVE-2025-1752 Denial of Service in run-llama/llama_index

A Denial of Service DoS vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llamaindex project, affecting version latestv0.12.15. The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the maxdepth...

CVE-2025-1752

A Denial of Service DoS vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llamaindex project, affecting version latestv0.12.15. The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the maxdepth...

DEBIAN-CVE-2025-37889

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platformmax as control value This reverts commit 9bdd10d57a88 "ASoC: ops: Shift tested values in sndsocputvolsw by +min", and makes some additional related updates. There are two ways the platformmax...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling the platformmax control value, which could result in a volume limit error...

SUSE CVE-2025-37803

In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting sizelimitmb to u64 when calculate pglimit...

DEBIAN-CVE-2025-37803

In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting sizelimitmb to u64 when calculate pglimit...

UBUNTU-CVE-2025-37803

In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting sizelimitmb to u64 when calculate pglimit...

CVE-2025-37803 udmabuf: fix a buf size overflow issue during udmabuf creation

In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting sizelimitmb to u64 when calculate pglimit...