6364 matches found
Astra Linux â Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fixed an issue where a âoff-by-oneâ root connection error occurred. Before attaching a new root to the old root, the number of children in the new root was checked to ensure that only the top-level groups of the...
Astra Linux â Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: âmm: memoryfailure: unmap poisoned folio during migration properlyâ. Patch series âmm: memoryfailure: unmap poisoned folio during migration properlyâ, version 3. This patch fixes two bugs during folio migration if the folio is...
Astra Linux â Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: hisiaccvfiopci: bugfix for live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The...
Astra Linux â Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: schedext: Corrected incorrect autogroup migration detection. The function scxmovetask is called from schedmovetask, and it informs the BPF scheduler that cgroup migration is being performed. schedmovetask is used for both cgroup...
Astra Linux â Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: mm/gup: rejecting FOLLSPLITPMD with hugetlb VMAs. The patch series âmm: fixes for device-exclusive entries hmmâ, version 2. While discussing the PageTail call in makedeviceexclusiverange, I recently discovered that device-exclusi...
Exploit for Unrestricted Upload of File with Dangerous Type in Wpvivid Migration\,_Backup\,_Staging
CVE-2025-5961 Migration, Backup, Staging â WPvivid Backup &...
Navigating AWS Migration: Achieving Clarity and Confidence
Migrating workloads to Amazon Web Services AWS represents a significant strategic opportunity, enabling greater agility, scalability, and potential for innovation. But undertaking this transition without a comprehensive strategy for visibility and security can introduce unforeseen risks,...
OESA-2025-1593 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading csssets for migration Each cset cssset is pinned by its tasks. When we're moving tasks around across csets for...
OESA-2025-1597 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading csssets for migration Each cset cssset is pinned by its tasks. When we're moving tasks around across csets for...
Navigating AWS Migration: Achieving Clarity and Confidence
Migrating workloads to Amazon Web Services AWS represents a significant strategic opportunity, enabling greater agility, scalability, and potential for innovation. But undertaking this transition without a comprehensive strategy for visibility and security can introduce unforeseen risks,...
Important: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.8.7 security and bug fix update
The Migration Toolkit for Containers MTC 1.8.7 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Samsung Smart Switch security vulnerability
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in Samsung Smart Switch versions prior to 3.7.64.10, which stems from improper authorization and could allow a local attacker to read data with Smart Switch privileges...
Assessing and Enhancing Quantum Readiness in Mobile Apps
Quantum computers threaten widely deployed cryptographic primitives such as RSA, DSA, and ECC. While NIST has released post-quantum cryptographic PQC standards e.g., Kyber, Dilithium, mobile app ecosystems remain largely unprepared for this transition. We present a large-scale binary analysis of...
Multiple vulnerabilities in wivia 5
Overview wivia 5 provided by UCHIDA YOKO CO., LTD. contains multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2025-41385 Cross-site Scripting CWE-79 - CVE-2025-41406 Client-Side Enforcement of Server-Side Security CWE-602 - CVE-2025-47697 Shogo Iyota of GMO Cybersecurity by...
PT-2025-24602 ¡ Crates.Io ¡ Arrow2
Rows::row unchecked allows out of bounds access to the underlying buffer without sufficient checks. The arrow2 crate is no longer maintained, so there are no plans to fix this issue. Users are advised to migrate to the arrow crate, instead...
The End of Universal Lifelong Identifiers: Identity Systems for the AI Era
Many identity systems assign a single, static identifier to an individual for life, reused across domains like healthcare, finance, and education. These Universal Lifelong Identifiers ULIs underpin critical workflows but now pose systemic privacy risks. We take the position that ULIs are...
Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.21.0 release
Red Hat OpenShift Dev Spaces 3.21 has been released. All containers have been updated to include feature enhancements, bug fixes and CVE fixes. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in...
kernel: sched/rt: Fix race in push_rt_task
In the Linux kernel, the following vulnerability has been resolved: sched/rt: Fix race in pushrttask Overview ======== When a CPU chooses to call pushrttask and picks a task to push to another CPU's runqueue then it will call findlocklowestrq method which would take a double lock on both CPUs'...
kernel: sched/rt: Fix race in push_rt_task
In the Linux kernel, the following vulnerability has been resolved: sched/rt: Fix race in pushrttask Overview ======== When a CPU chooses to call pushrttask and picks a task to push to another CPU's runqueue then it will call findlocklowestrq method which would take a double lock on both CPUs'...
