29 matches found
ALSA-2025:23480 Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fixed bpfarchtextpoke when newaddr == NULL again. The commit 7ded842b356d "s390/bpf: Fixed bpfplt pointer arithmetic" accidentally removed the critical portion of the commit c730fce7c70c "s390/bpf: Fixed bpfarchtextpoke...
Linux Distros Unpatched Vulnerability : CVE-2025-38283
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hisiaccvfiopci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device...
PT-2025-31085
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the bpf arch text poke function within the s390/bpf subsystem. A previous fix, introduced by commit c730fce7c70c, was inadvertently removed b...
DEBIAN-CVE-2025-38283
In the Linux kernel, the following vulnerability has been resolved: hisiaccvfiopci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The liv...
CVE-2025-38283 hisi_acc_vfio_pci: bugfix live migration function without VF device driver
In the Linux kernel, the following vulnerability has been resolved: hisiaccvfiopci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The liv...
PT-2025-29003
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the hisi acc vfio pci component related to live migration. Specifically, if a Virtual Function VF device driver is not loaded in the Guest OS,...
kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets.
in linux kernel r8169, when transmitting small fragmented packets, invalid entries were inserted into the transmit ring buffer, leading to calls to dmaunmapsingle with a null address...
kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets.
in linux kernel r8169, when transmitting small fragmented packets, invalid entries were inserted into the transmit ring buffer, leading to calls to dmaunmapsingle with a null address...
kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets.
in linux kernel r8169, when transmitting small fragmented packets, invalid entries were inserted into the transmit ring buffer, leading to calls to dmaunmapsingle with a null address...
kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets.
in linux kernel r8169, when transmitting small fragmented packets, invalid entries were inserted into the transmit ring buffer, leading to calls to dmaunmapsingle with a null address...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a call to the freepagesexact function using a NULL address...
DEBIAN-CVE-2024-26785
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix protection fault in iommufdtestsyzconviova Syzkaller reported the following bug: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 1 SMP KASAN KASAN: null-ptr-deref in range...
jq:jq_fuzz_fixed: Crash with empty stacktrace
Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=5316154545471488 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzfixed Job Type: libfuzzerubsanjq Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002647e200 Crash State: NULL...
vlc:vlc-demux-dec-libfuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6541374742462464 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000800000010 Crash State: NULL Sanitizer: undefined UBSAN...
AZL-38998 CVE-2022-3854 affecting package ceph for versions less than 18.2.1-1
A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service...
DEBIAN-CVE-2022-3854
A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service...
PublicVault Contract Allows Minting Tokens to a Null Address
Lines of code Vulnerability details Impact The PublicVault contract allows the minting of tokens to a null address. When the redeemFutureEpoch function is called with a null address as the receiver, the function will still proceed with the minting of the underlying asset, but the tokens will not...
PT-2022-6797 · Ceph +4 · Ceph +4
Name of the Vulnerable Software and Affected Versions: Ceph affected versions not specified Description: A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service...
rdkit:smiles_string_to_mol_fuzzer: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6370111190073344 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: smilesstringtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: memory MSAN Crash...