The vulnerability of the gfs2_scan_glock_lru() function in the fs/gfs2/glock.c module of the GFS2 file system support module for Linux’s operating system allows a hacker to cause a service failure.

The vulnerability of the gfs2scanglocklru function in the fs/gfs2/glock.c module of the GFS2 file system support in Linux’s operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2025-1043)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1043 advisory. When curl is asked to use HSTS, the expiry time for a subdomain mightoverwrite a parent domain's cache entry, making it end sooner or later thanotherwise intended. This affects curl using applications...

The vulnerability of the check_helper_mem_access() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the checkhelpermemaccess function in the kernel/bpf/verifier.c module of the Linux operating system is related to errors in the code. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of the ec_bhfremove() function in the drivers/net/ethernet/ec_bhf.c file allows a hacker to cause a service failure in Linux-based systems with Ethernet network adapters.

The vulnerability of the ecbhfremove function in the drivers/net/ethernet/ecbhf.c file, which is part of Linux’s Ethernet network adapter support, stems from the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2025-1033)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1033 advisory. There is an issue in CPython when using bytes.decodeunicodeescape, error=ignore|replace. If you are not using the unicodeescape encoding or an error handler your usage is not affected. To work-around...

The vulnerability of the nci_core_conn_create() function in the include/net/nfc/nci_core.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ncicoreconncreate function in the include/net/nfc/ncicore.h module of the Linux operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the nfsd4_free_stateid() function in the fs/nfsd/nfs4state.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfsd4freestateid function in the fs/nfsd/nfs4state.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

The vulnerability of the nvmet_alloc_ctrl() function in the drivers/nvme/target/core.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmetallocctrl function in the drivers/nvme/target/core.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the usb_stream_free() function in the sound/usb/usx2y/usb_stream.c module allows a hacker to cause a service failure for USB audio devices in Linux operating systems.

The vulnerability of the usbstreamfree function in the sound/usb/usx2y/usbstream.c module, which handles USB audio devices in Linux operating systems, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2025-6018

A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows an unprivileged local attacker for example, a user logged in via SSH to obtain the elevated privileges normally reserved for a physically present,...

Important: Red Hat Security Advisory: ipa security update

An update for ipa is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Astra Linux – Vulnerability in Systemd

A vulnerability was discovered in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary, thereby gaining access to the original’s privileged process core dump. This enables the attacker to read sensitive data, such as the contents of...

TencentOS Server 4: edk2 (TSSA-2024:0722)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0722 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: linux-firmware (TSSA-2024:0321)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0321 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: autotrace (TSSA-2025:0143)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0143 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 3: kernel (TSSA-2023:0228)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0228 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Amazon Linux 2023 : libsoup, libsoup-devel (ALAS2023-2025-997)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-997 advisory. A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the...

Important: kernel-livepatch-4.14.355-277.643

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect access to buffers with no active references CVE-2025-21811 Affected Packages: kernel-livepatch-4.14.355-277.643 Issue Correction: Please ensure you have live patching enabled. Run yum update...

Moderate: Red Hat Security Advisory: golang security update

An update for golang is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Amazon Linux 2023 : cuda-cccl-12 (ALAS2023NVIDIA-2025-121)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-121 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...