Linux rtl8150_start_xmit() DoS

The vulnerability of the rtl8150startxmit function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux sound/core/pcm_native.c Heap Buffer Overflow DoS

The vulnerability in the sound/core/pcmnative.c module of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability can allow an attacker to cause a service failure...

Btrfs extent_io.c Heap Buffer Overflow DoS

The vulnerability of the extentfiemap function in the fs/btrfs/extentio.c module of the Btrfs file system support in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2025-40294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: MGMT: Fix OOB access in parseadvmonitorpattern In the parseadvmonitorpattern function, the value of the 'length' variable is currently limited to...

Linux kernel ftrace DoS

The vulnerability in the kernel/trace/ftrace.c component of the Linux operating system is related to the use of resources with a similar identifier. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux bpf_jit Heap Buffer Overflow DoS

The vulnerability of the bpfjit.c component in the Linux operating system is related to incorrect initialization of the resource. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux Btrfs Component Compromise

The vulnerability of the fs/btrfs/qgroup.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux iio/light/as73211.c DoS

The vulnerability of the iio/light/as73211.c component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2025-14104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function,...

Linux hid-asus.c DoS

The vulnerability of the hid-asus.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2025-40259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: sg: Do not sleep in atomic context sgfinishremreq calls blkrqunmapuser. The latter function may sleep. Hence, call sgfinishremreq with interrupts enabled...

Linux Distros Unpatched Vulnerability : CVE-2025-40246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix out of bounds memory read error in symlink repair xfs/286 produced this report on my test fleet:...

Linux Distros Unpatched Vulnerability : CVE-2025-40223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - most: usb: Fix use-after-free in hdmdisconnect hdmdisconnect calls mostderegisterinterface, which eventually unregisters the MOST interface device with...

Linux Distros Unpatched Vulnerability : CVE-2025-41066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system...

Linux Distros Unpatched Vulnerability : CVE-2025-40265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vfat: fix missing sbminblocksize return value checks When emulating an nvme device on qemu with both logicalblocksize and physicalblocksize set to 8 KiB, but...

Linux Distros Unpatched Vulnerability : CVE-2025-43458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS...

Linux Distros Unpatched Vulnerability : CVE-2025-40257

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: fix a race in mptcppmdeladdtimer mptcppmdeladdtimer can call skstoptimersyncsk, &entry-addtimer while another might have free entry already, as reported ...

Linux Distros Unpatched Vulnerability : CVE-2025-40251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - devlink: rate: Unset parent pointer in devlratenodesdestroy The function devlratenodesdestroy is documented to Unset parent for all rate objects. However, it wa...

Linux Distros Unpatched Vulnerability : CVE-2025-40258

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: fix race condition in mptcpschedulework syzbot reported use-after-free in mptcpschedulework 1 Issue here is that mptcpschedulework schedules a work, the...

Linux Distros Unpatched Vulnerability : CVE-2025-58098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache HTTP Server 2.4.65 and earlier with Server Side Includes SSI enabled and modcgid but not modcgi passes the shell-escaped query string to exec cmd=...