PT-2025-6394 · Iommu · Iommu

Name of the Vulnerable Software and Affected Versions: IOMMU affected versions not specified Description: The issue is related to improper access control in the IOMMU, which may allow a privileged attacker to bypass RMP checks. This could potentially lead to a loss of guest memory integrity...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39482)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39482 advisory. - In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47692)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47692 advisory. - In the Linux kernel, the following vulnerability has been resolved: nfsd: return -EINVAL when namelen is 0...

Open5GS Code Execution Vulnerability

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a code execution vulnerability that can be exploited by an attacker to cause invalid parsing and memory release...

CVE-2022-41211

Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D Visual Enterprise Author and SAP 3D Visual Enterprise Viewer, Arbitrary Code Execution can be triggered when payload forces:Re-use of dangling pointer which refers to overwritte...

CVE-2022-20927

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper memory...

CVE-2024-21524

All versions of the package node-stringbuilder are vulnerable to Out-of-bounds Read due to incorrect memory length calculation, by calling ToBuffer, ToString, or CharAt on a StringBuilder object with a non-empty string value input. It's possible to return previously allocated memory, for example,...

CVE-2024-20260

A vulnerability in the VPN and management web servers of the Cisco Adaptive Security Virtual Appliance ASAv and Cisco Secure Firewall Threat Defense Virtual FTDv, formerly Cisco Firepower Threat Defense Virtual, platforms could allow an unauthenticated, remote attacker to cause the virtual device...

CVE-2024-20402

A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This...

Android mm/mremap.c Privilege Escalation

The vulnerability of the mm/mremap.c module in Android operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

SUSE-SU-2025:20077-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52610: net/sched: actct: fix skb leak and crash on ooo frags bsc1221610. - CVE-2023-52752: smb: client: fix use-after-free bug in cifsdebugdataprocsho...

SUSE-SU-2025:20076-1 Security update for qemu

This update for qemu fixes the following issues: - Bugfixes and CVEs: hw/usb/hcd-ohci: Fix 1510, 303: pid not IN or OUT bsc1230834, CVE-2024-8354 softmmu: Support concurrent bounce buffers bsc1230915, CVE-2024-8612 system/physmem: Per-AddressSpace bounce buffering bsc1230915, CVE-2024-8612...

Qt Memory Management DoS

The vulnerability of the cross-platform software development framework Qt is related to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

btrfs DoS

The vulnerability of the mm/writeback components in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

s390/mm kernel DoS

The vulnerability of the s390/mm kernel components in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

mm Linux Kernel DoS

The vulnerability of the mm component in the Linux operating system’s kernel is related to the operation of the operation outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-8792

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, related to the handling of memory allocation failures during dup mmap and uprobe registration. If a memory allocation fails, the...

CVE-2025-21671

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

CVE-2025-21671 zram: fix potential UAF of zram table

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...

CVE-2025-21671 zram: fix potential UAF of zram table

In the Linux kernel, the following vulnerability has been resolved: zram: fix potential UAF of zram table If zrammetaalloc failed early, it frees allocated zram-table without setting it NULL. Which will potentially cause zrammetafree to access the table if user reset an failed and uninitialized...