9219 matches found
CVE-2025-40161
In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The driver incorrectly determines SGI vs SPI interrupts by checking IRQ number 16, which fails with dynamic IRQ allocation. During unbind, this causes improper SGI cleanup leading to...
CVE-2025-40153 mm: hugetlb: avoid soft lockup when mprotect to large memory area
In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect to a large hugetlb memory area in our customer's workload 300GB hugetlb memory, soft lockup was observed: watchdog: BUG: soft lockup - CPU98...
CVE-2025-40153
In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect to a large hugetlb memory area in our customer's workload 300GB hugetlb memory, soft lockup was observed: watchdog: BUG: soft lockup - CPU98...
This Is the Platform Google Claims Is Behind a 'Staggering’ Scam Text Operation
Google is suing 25 people it alleges are behind a “relentless” scam text operation that uses a phishing-as-a-service platform called Lighthouse...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990874)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990874 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to check the kobject state, which could lead to a failure of a sysfs operation...
Malicious code in cici-tempe18-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ff731287cfe89d21c853cdd33d5cc2d5b2ff9a1f294bb3ff0a89a75eaf83b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
kernel: bpf: avoid holding freeze_mutex during mmap operation
In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freezemutex during mmap operation We use map-freezemutex to prevent races between mapfreeze and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freezemutex...
kernel: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error This patch addresses a race condition for an ODP MR that can result in a CQE with an error on the UMR QP. During the mlx5ibderegmr flow, the following sequence of...
kernel: bpf: avoid holding freeze_mutex during mmap operation
In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freezemutex during mmap operation We use map-freezemutex to prevent races between mapfreeze and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freezemutex...
MAL-2025-106723 Malicious code in olympic_silverfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a51cf764c6ccd36b5d6f5c015ac2ad68f54130862d8ec6e82782c1395801f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-78627 Malicious code in hadianto-bakwan16-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c997ece33fff0a5c28e600e89ebe225f9758526329053f4efecbcf6ec74adf45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
ZOHO ManageEngine Applications Manager security vulnerabilities
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A command injection...
PT-2025-46274
Name of the Vulnerable Software and Affected Versions WP Custom Admin Login Page Logo plugin for WordPress versions prior to 1.4.8.5 Description The plugin is susceptible to Cross-Site Request Forgery CSRF due to missing or incorrect nonce validation on the wpclpl save functionality. This allows...
PT-2025-51673
Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.18 and later Android Binder driver Rust implementation Description The first Common Vulnerabilities and Exposures CVE has been assigned to Rust code within the Linux kernel. The issue, identified as CVE-2025-68260,...
SUSE-SU-2025:21067-1 Security update for powerpc-utils
This update for powerpc-utils fixes the following issues: - Start SMT service after networking bsc1249152 ltc214730 - Fix inconsistent Core Online/Offline States Observed in lscpu and ppc64cpu --info Command Outputs During DLPAR Operation bsc1246126 ltc214064 - Fix HNV installation network...
CVE-2025-12916: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portallogin of the component Frontend. This manipulation of the argument loginUrl causes command injection. The attack may be initiated remotely. T...
EUVD-2025-38323
Potential Denial of Service issue in all supported versions of Revenera InstallShield version 2025 R1, 2024 R2, 2023 R2, and prior. When e.g., a local administrator performs an uninstall, a symlink may get followed on removal of a user writeable configuration directory and induce a Denial of...
CVE-2025-64493: Improper Neutralization of Special Elements used in an SQL Command
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. In versions 8.6.0 through 8.9.0, there is an authenticated, blind time-based SQL-injection inside the appMetadata-operation of the GraphQL-API. This allows extraction of arbitrary data from the...
