Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fixed an issue where access to the vnicinfo array was out of range. The bnxtqueuestart | stop operation accesses vnicinfo, which also allocates resources. This indicates that bp-nrvnics. Therefore, it should not access...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: fs/buffer: Fixed an issue where a use-after-free occurred when calling bhread helper functions. There is one issue as follows: BUG: KASAN: Stack out-of-bounds condition in endbufferreadsync+0xe3/0x110. A size 8 read was performed...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: A stack overflow issue was fixed when loading vlenb. The user-space load mechanism can place up to 2048 bits into the xlen bit stack buffer. Since we only need the xlen bits, we check the size of the buffer in advanc...

The vulnerability of the Media components in Google Chrome and Microsoft Edge allows attackers to enhance their privileges.

The vulnerability of the Media components in Google Chrome and Microsoft Edge is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the nfs_readreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the nfsreadreply function in the net/nfs.c component of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

ROS-20251031-02

A vulnerability in the nvJPEG library of the NVIDIA CUDA Toolkit, a software tool for parallel computing on graphics processors, is related to buffer overruns. The NVIDIA CUDA Toolkit GPU parallel computing software nvJPEG library vulnerability is related to writing outside buffer boundaries...

The vulnerability in the driver/usb/gadget/f_dfu.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability in the driver/usb/gadget/fdfu.c file of the U-Boot loader is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause system failures...

The vulnerability of the nfs_readlink_reply function in the net/nfs.c component of the U-Boot loader allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the nfsreadlinkreply function in the net/nfs.c component of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the sound/soc/codecs/wcd937x.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the sound/soc/codecs/wcd937x.cx module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the mm/kmsan/core.c and mm/kmsan/kmsan_test.c modules in the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the mm/kmsan/core.c and mm/kmsan/kmsantest.c modules of the Linux operating system relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

UBUNTU-CVE-2025-10920

GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

CVE-2025-10920

GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

The vulnerability of the DB2 IBM DB2 High Performance Unload (Db2 HPU) table unloading utility, related to writing beyond buffer boundaries in memory, allows a malicious actor to cause a service failure.

The vulnerability of the DB2 IBM DB2 High Performance Unload Db2 HPU table unloading utility is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the SetValue() and GetValue() functions (/goform/AdvSetLanip) of the Tenda O3 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SetValue and GetValue functions /goform/AdvSetLanip of the Tenda O3 wireless access point software lies in the fact that the operation goes beyond the buffer in memory when processing the macList parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the drm_edid_raw function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmedidraw function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Advisory ROSA-SA-2025-3040

Software: gnutls 3.6.16 OS: ROSA Virtualization 2.1 unaffected versions = gnutls-3.6.16-8.0.1.rv3.4 affected versions gnutls-3.6.16-8.0.1.1.rv3.4 CVE-ID: CVE-2024-12243 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in GnuTLS when processing ASN.1 data via libtasn1 could result in...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-26659)

xhci: isoc Babble and Buffer Overrun events are not handled properly. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503655; scriptversion"1.2";...

The vulnerability of the iGC component in the Linux operating system’s kernel allows a hacker to gain elevated privileges within the system.

The vulnerability of the igc component in the Linux operating system’s kernel is related to an operation that goes beyond the buffer boundaries in memory within the igcxdpxmit function. Exploiting this vulnerability can allow an attacker to gain increased privileges within the system...

The vulnerability of the UDC component of the Dolby Digital Plus audio codec allows a intruder to trigger a service failure.

The vulnerability of the UDC component of the Dolby Digital Plus audio codec is related to recording beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...