CVE-2025-68167 gpiolib: fix invalid pointer access in debugfs

In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix invalid pointer access in debugfs If the memory allocation in gpiolibseqstart fails, the s-private field remains uninitialized and is later dereferenced without checking in gpiolibseqstop. Initialize s-private to NUL...

CVE-2025-68167

Summary (CVE-2025-68167) : In the Linux kernel gpiolib, a path in debugfs allows a local attacker to trigger a pointer dereference. The root cause is that if memory allocation in gpiolib_seq_start() fails, s->private remains uninitialized and is later dereferenced in gpiolib_seq_stop(). The fi...

CVE-2025-40361

...

CVE-2025-40361

CVE-2025-40361 entry is rejected/not used and not an active vulnerability.

CVE-2025-40361 fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock

In the Linux kernel, the following vulnerability has been resolved: fs: ext4: change GFPKERNEL to GFPNOFS to avoid deadlock The parent function ext4xattrinodelookupcreate already uses GFPNOFS for memory alloction, so the function ext4xattrinodecachefind should use same gfpflag...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improper memory allocation when SDCA parses the mipi-sdca-control-cn-list, which could lead to a crash...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from holding spinlocks during memory allocation in refillskbs, which could lead to a deadlock...

PT-2025-51582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the netpoll subsystem that can lead to a deadlock scenario when the system experiences significant memory pressure. This occurs during memory...

编号撤回

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from inconsistent memory allocation flags, which could lead to deadlocks...

PT-2025-51580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's gpiolib component related to invalid pointer access within the debugfs interface. Specifically, if memory allocation within the gpiolib seq start...

CVE-2025-65834

Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. By setting these values to extremely large numbers, the application attempts to allocate excessive memory during image...

CVE-2025-65834

CVE-2025-65834 affects Meltytech Shotcut 25.10.31, with a buffer overflow in mlt_image_fill_white triggered by processing MLT project files that specify extremely large width/height. The issue is documented across several security entries (Red Hat, SUSE/OpenSUSE, NVD, EUVD, OSV, CVE.org) and is d...

Linux Distros Unpatched Vulnerability : CVE-2025-68281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list struct sdcacontrol declares values field as integer array. But the memory allocated to it is of char...

CVE-2025-65834

Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. By setting these values to extremely large numbers, the application attempts to allocate excessive memory during image...

Linux Distros Unpatched Vulnerability : CVE-2025-68190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/atom: Check kcalloc for WS buffer in amdgpuatomexecutetablelocked kcalloc may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL...

Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities

Summary IBM HTTP Server used by IBM WebSphere Application Server is affected by multiple vulnerabilities due to libexpat and the included Apache HTTP Server. Vulnerability Details CVEID:CVE-2025-66200 DESCRIPTION: moduserdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP...

Security Bulletin: Vulnerability in expat affects IBM Netezza Appliance

Summary The expat package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-59375 Vulnerability Details CVEID:CVE-2025-59375 DESCRIPTION: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small docume...

Vulnerability of EFI components of the Linux operating system’s kernel, allowing a hacker to trigger a service failure

The vulnerability of EFI components in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability of the destroy_args() function in the mm/debug_vm_pgtable.c component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the destroyargs function in the mm/debugvmpgtable.c component of the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability allows an attacker to cause a service failure...

Uncontrolled Memory Allocation

pypdf is vulnerable to uncontrolled memory allocation. The vulnerability is due to improper handling of LZWDecode streams, which allows an attacker to craft a malicious PDF that causes excessive memory consumption up to 1 GB per stream during content parsing...