362 matches found
CVE-2025-68292 mm/memfd: fix information leak in hugetlb folios
In the Linux kernel, the following vulnerability has been resolved: mm/memfd: fix information leak in hugetlb folios When allocating hugetlb folios for memfd, three initialization steps are missing: 1. Folios are not zeroed, leading to kernel memory disclosure to userspace 2. Folios are not marke...
CVE-2025-68292
The CVE-2025-68292 issue concerns the Linux kernel memfd hugetlb folio allocation. A path used by memfd bypassed the normal page fault handler (hugetlb_no_page), omitting three initialisation steps that could leak kernel memory or cause races: (1) folios not zeroed, risking information disclosure...
CVE-2023-53866 ASoC: soc-compress: Reposition and add pcm_mutex
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: Reposition and add pcmmutex If paniconwarn is set and compress streamDPCM is started, then kernel panic occurred because card-pcmmutex isn't held appropriately. In the following functions, warning were issued ...
CVE-2023-53866
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: Reposition and add pcmmutex If paniconwarn is set and compress streamDPCM is started, then kernel panic occurred because card-pcmmutex isn't held appropriately. In the following functions, warning were issued ...
CVE-2025-40130 scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling The cpulatencyqosadd/remove/updaterequest interfaces lack internal synchronization by design, requiring the caller to ensure thread safety. The current...
PT-2025-52903
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0+ 3 Description The Linux kernel contains a race condition within the macintosh/mac hid subsystem, specifically in the mac hid toggle emumouse function. This issue arises when multiple processes concurrently...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988816)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988816 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: jack: Access inputdev under mutex It is possible when using ASoC that inputdev is...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fixed a deadlock caused by concurrent flag access. The threaded IRQ function in this driver reads the flag twice: once to lock a mutex and once to unlock it. Although the code that sets the flag is designed t...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fixed an issue where an invalid lock was taken on a wedge. If devices like GuC upload are wedged, the submission is not yet enabled, and the state has not even been initialized. This fix prevents the wedge-related calls...
EUVD-2017-6355
Malware in sbrugna...
EUVD-2017-6358
Malware in sbrugna...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986374)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986374 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: jack: Access inputdev under mutex It is possible when using ASoC that inputdev is...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987368)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987368 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: jack: Access inputdev under mutex It is possible when using ASoC that inputdev is...
CVE-2023-53581
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for NOTREADY flag state after locking Currently the check for NOTREADY flag is performed before obtaining the necessary lock. This opens a possibility for race condition when the flow is concurrently removed from...
UBUNTU-CVE-2023-53549
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Rework long task execution when adding/deleting entries When adding/deleting large number of elements in one step in ipset, it can take a reasonable amount of time and can result in soft lockup errors. The patch...
EUVD-2025-13991
Malicious code in bioql PyPI...
EUVD-2022-55168
Malicious code in bioql PyPI...
EUVD-2022-54625
Malicious code in bioql PyPI...