CVE-2025-40340

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix oops in xegemfault when running corehotunplug test. I saw an oops in xegemfault when running the xe-fast-feedback testlist against the realtime kernel without debug options enabled. The panic happens after corehotunpl...

CVE-2025-40340 drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test.

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix oops in xegemfault when running corehotunplug test. I saw an oops in xegemfault when running the xe-fast-feedback testlist against the realtime kernel without debug options enabled. The panic happens after corehotunpl...

CVE-2022-50647

CVE-2022-50647 relates to a Linux kernel issue on RISC‑V where port I/O string accessors (insb/outsb, etc.) used the physical PCI port I/O address instead of memory mapping, breaking parport/PCIe parallel-port accesses and causing kernel faults (memory access fault: Unable to handle kernel access...

CVE-2022-50647 RISC-V: Make port I/O string accessors actually work

In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O string accessors such as insb', outsb', etc. which use the physical PCI port I/O address rather than the corresponding memory mapping to get at the requested...

CVE-2025-40272

CVE-2025-40272 : In the Linux kernel, a use-after-free race in mm/secretmem fault handling could occur when two tasks fault on the same memfd_secret page concurrently, risking a supervisor not-present page fault. The issue arises from the previous fault-handler ordering, which freed the folio bef...

EUVD-2025-32754

In the Linux kernel, the following vulnerability has been resolved: x86: fix clearuserrepgood exception handling annotation This code no longer exists in mainline, because it was removed in commit d2c95f9d6802 "x86: don't use REPGOOD or ERMS for user memory clearing" upstream. However, rather tha...

EUVD-2018-5833

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986603)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986603 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987237)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987237 advisory. In the Linux kernel, the following vulnerability has been resolved: riscv: fix oops caused by irqsoff latency tracer The tracehardirqson,off require the caller to...

Linux Distros Unpatched Vulnerability : CVE-2019-20392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid memory access flaw is present in libyang before v1.0-r1 in the function resolvefeaturevalue when an if-feature statement is used inside a list key...

Linux Distros Unpatched Vulnerability : CVE-2021-47034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix pte update for kernel memory on radix When adding a PTE a ptesync is needed...

Linux Distros Unpatched Vulnerability : CVE-2024-46734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between direct IO write and fsync when using same fd If we have 2 threads th...

CVE-2022-36842

A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2018-13899

Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21919)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21919 advisory. - In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix potential memory...

CVE-2022-49905

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible leaked pernet namespace in smcinit In smcinit, registerpernetsubsys&smcnetstatops is called without any error handling. If it fails, registering of &smcnetops won't be reverted. And if smcnlinit fails,...

Linux Distros Unpatched Vulnerability : CVE-2024-44975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: fix panic caused by partcmdupdate We find a bug as below: BUG: unable to hand...

Astra Linux – Vulnerability in hdf5

The HDF5 library from version 1.14.3 has a segmentation fault in the H5VM.c function H5VMmemcpyvv...

AMD Client Processor 安全漏洞

AMD Client Processor is a processor for client devices e.g., personal computers, laptops, etc. from UltraMicroelectronics AMD. A security vulnerability exists in AMD Client Processor that stems from improper access control of the fTPM driver in a trusted operating system could allow a privileged...

CVE-2025-21675 net/mlx5: Clear port select structure when fail to create

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clear port select structure when fail to create Clear the port select structure on error so no stale values left after definers are destroyed. That's because the mlx5lagdestroydefiners always try to destroy all lag...