Vulnerabilities of functions rtk_usb3phy_probe() and devm_kzalloc() in the Linux operating system, allowing attackers to cause service failures

The vulnerabilities of the rtkusb3phyprobe and devmkzalloc functions in the Linux operating system are related to pointer arithmetic errors. Exploiting these vulnerabilities can allow an attacker to cause a service failure...

The vulnerability of the net/vmw_vsock/virtio_transport_common.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/vmwvsock/virtiotransportcommon.c component in the Linux operating system is related to information disclosure. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `arch/arm64/kvm/sys regs.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the arch/arm64/kvm/sys regs.c component of the Linux operating system is related to reading data from buffer fields beyond their allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/spi/spi-fsl-dspi.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/spi/spi-fsl-dspi.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `drivers/net/ethernet/mellanox/mlx5/core/en_main.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/net/ethernet/mellanox/mlx5/core/enmain.c component of the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tps6598x module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tps6598x module in the Linux operating system is related to the release of an incorrect pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the pci-epf-mhi.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pci-epf-mhi.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ath12k/dp.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ath12k/dp.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-27676

Name of the Vulnerable Software and Affected Versions: Laundry version 2.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Account Takeover. This affects Laundry on Linux and MacOS...

The vulnerability of the drivers/net/wireless/ath/ath12k component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/net/wireless/ath/ath12k component of the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-49491

Improper Resource Shutdown or Release vulnerability in ASR FalconLinux、Kestrel、LapwingLinux on Linux trafficstat modules allows Resource Leak Exposure. This vulnerability is associated with program files trafficstat/trafficservice/trafficservice.C. This issue affects...

CVE-2025-49489 Resource leaks in cm

Improper Resource Shutdown or Release vulnerability in ASR FalconLinux、Kestrel、LapwingLinux on Linux conmgr components allows Resource Leak Exposure. This vulnerability is associated with program files conmgr/dialertask.C. This issue affects FalconLinux、Kestrel、LapwingLinux: before v1536...

Oracle Linux 10 : osbuild-composer (ELSA-2025-9623)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9623 advisory. - Ensure build on latest golang: CVE-2024-34156 - Rebuild for CVE-2025-22871 Tenable has extracted the preceding description block directly from the Oracle Lin...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : yelp-xsl (SUSE-SU-2025:02168-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:02168-1 advisory. - CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files...

The vulnerability of the net/smc component in Linux operating systems allows attackers to compromise data integrity.

The vulnerability of the net/smc component in Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

The vulnerability of the vfs_getattr() function in the overlayfs component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vfsgetattr function in the overlayfs component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gdm (SUSE-SU-2025:02003-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02003-1 advisory. - CVE-2025-6018: Removes pamenv from auth stack for security reason bsc1243226. Tenable has extracted th...

The vulnerability of the tcf_mirred_to_dev() function in the net/sched/act_mirred.c module of the network/scheduling subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tcfmirredtodev function in the net/sched/actmirred.c module of the network/scheduling subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the si_dpm_enable() function in the drivers/gpu/drm/amd/pm/powerplay/si_dpm.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems, which allows a hacker to cause a service failure

Vulnerability of the sidpmenable function in the drivers/gpu/drm/amd/pm/powerplay/sidpm.c module – The driver for supporting Direct Rendering Infrastructure DRI in AMD graphics cards for Linux operating systems is vulnerable due to a buffer overflow vulnerability related to the assignment of the...

Azure Linux 3.0 Security Update: mysql (CVE-2025-30688)

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30688 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions th...