CVE-2025-48521: Use After Free

Improper input validation in the AMD Secure Processor ASP PCI driver could allow a local attacker to trigger a Use-After-Free UAF condition, potentially resulting in a loss of platform integrity or crash...

AMD Server Software and Embedded Chipset Driver Vulnerabilities Identified in Windows® Environments

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-0432| Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.|...

CVE-2026-43448

A flaw was found in the Linux kernel's nvme-pci driver. A race condition exists in the nvmepollirqdisable function, where the device can be concurrently disabled by nvmeresetwork. This can lead to an unbalanced interrupt IRQ enable operation, resulting in a kernel warning. This issue may cause...

The vulnerability in the `drivers/isdn/hardware/mISDN/hfcpci.c` module related to mISDN hardware devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/isdn/hardware/mISDN/hfcpci.c module, related to mISDN hardware support in the Linux operating system, is associated with incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004355)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004355 advisory. The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space. Tenable has extracted the preceding description block...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001882 advisory. The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate ...

CVE-2022-50850

In the Linux kernel, the following vulnerability has been resolved: scsi: ipr: Fix WARNING in iprinit iprinit will not call unregisterrebootnotifier when pciregisterdriver fails, which causes a WARNING. Call unregisterrebootnotifier when pciregisterdriver fails. notifier callback iprhalt ipr...

CVE-2022-50850

In the Linux kernel, the following vulnerability has been resolved: scsi: ipr: Fix WARNING in iprinit iprinit will not call unregisterrebootnotifier when pciregisterdriver fails, which causes a WARNING. Call unregisterrebootnotifier when pciregisterdriver fails. notifier callback iprhalt ipr...

CVE-2022-50756 nvme-pci: fix mempool alloc size

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix mempool alloc size Convert the max size to bytes to match the units of the divisor that calculates the worst-case number of PRP entries. The result is used to determine how many PRP Lists are required. The code was...

CVE-2022-50636

The CVE-2022-50636 entry concerns the Linux kernel PCI subsystem and VF handling. The vulnerability stemmed from pci_device_is_present() returning false for virtual functions (VFs) because it relied on Vendor/Device IDs (0xffff for VFs), causing virtio I/O issues during VF removal/unbinding or wh...

Vulnerability of the mlx5vf_add_migration_pages() function in the drivers/vfio/pci/mlx5/cmd.c module – A driver for VFIO-enabled devices in the Linux operating system, which allows a hacker to cause a service failure

Vulnerability of the mlx5vfaddmigrationpages function in the drivers/vfio/pci/mlx5/cmd.c module – VFIO device drivers for Linux operating systems are vulnerable due to the lack of memory release after the effective lifespan. Exploiting this vulnerability can allow an attacker to cause service...

kernel: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods

A flaw was found in the Linux kernel. A local attacker could exploit a missing call to mcanclassfreedev in the mcanpciremove and mcanpciprobe error handling paths. This oversight leads to a memory leak, which could result in a denial of service DoS due to resource exhaustion...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990304)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990304 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the...

CVE-2025-40011

In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix null dereference in hdmi teardown pcisetdrvdata sets the value of pdev-driverdata to NULL, after which the driverdata obtained from the same dev is dereferenced in oaktrailhdmii2cexit, and the i2cdev is extracted...

CVE-2025-39956

In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igcprobe on LED setup error When igcledsetup fails, igcprobe fails and triggers kernel panic in freenetdev since unregisternetdev is not called. 1 This behavior can be tested using fault-injection framework,...

UBUNTU-CVE-2025-39956

In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igcprobe on LED setup error When igcledsetup fails, igcprobe fails and triggers kernel panic in freenetdev since unregisternetdev is not called. 1 This behavior can be tested using fault-injection framework,...

EUVD-2015-8431

Malware in sbrugna...

EUVD-2020-5169

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986366 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986726 advisory. In the Linux kernel, the following vulnerability has been resolved: net: arcnet: com20020: Fix null-ptr-deref in com20020pciprobe During driver initialization, the...