The vulnerability of the Spectrum Power 4 software lies in the improper assignment of permissions to critical resources, allowing attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the Spectrum Power 4 software is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary commands...

The vulnerability of the Spectrum Power 4 software, related to incorrect privilege assignment, allows a perpetrator to elevate their privileges.

The vulnerability of the Spectrum Power 4 software is related to incorrect privilege assignment. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the debug interface of the Spectrum Power 4 software allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the debug interface of the Spectrum Power 4 software lies in errors that occur when privileged application programming interfaces are used. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the msm_edp_ctrl_power() function in the drivers/gpu/drm/msm/edp/edp_ctrl.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the msmedpctrlpower function in the drivers/gpu/drm/msm/edp/edpctrl.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernel, is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2025-40120

In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock Prevent USB runtime PM autosuspend for AX88772 in bind. usbnet enables runtime PM autosuspend by default, so disabling it via the usbdriver flag is ineffective. O...

SUSE CVE-2025-40130

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling The cpulatencyqosadd/remove/updaterequest interfaces lack internal synchronization by design, requiring the caller to ensure thread safety. The current...

SUSE CVE-2025-40148

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dcstream cursor attribute functions The function dcstreamsetcursorattributes currently dereferences the stream pointer and nested members stream-ctx-dc-currentstate without checking for...

SUSE CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

The vulnerability of the `create_singlethread_workqueue()` function in the Linux kernel’s power component allows a hacker to trigger a service failure.

The vulnerability of the createsinglethreadworkqueue function in the Linux kernel’s power component is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2025-40120

In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock Prevent USB runtime PM autosuspend for AX88772 in bind. usbnet enables runtime PM autosuspend by default, so disabling it via the usbdriver flag is ineffective. O...

CVE-2025-40145

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Fix double cleanup on devmaddactionorreset failure When devmaddactionorreset fails, it calls the passed cleanup function. Hence the caller must not repeat that cleanup. Replace the "goto errregulatorfree" by the actu...

CVE-2025-40130

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling The cpulatencyqosadd/remove/updaterequest interfaces lack internal synchronization by design, requiring the caller to ensure thread safety. The current...

CISA Releases 18 Industrial Control Systems Advisories

CISA released 18 Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-317-01 Mitsubishi Electric MELSEC iQ-F Series ICSA-25-317-02 AVEVA Application Server IDE ICSA-25-317-03...

SUSE CVE-2025-40145

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Fix double cleanup on devmaddactionorreset failure When devmaddactionorreset fails, it calls the passed cleanup function. Hence the caller must not repeat that cleanup. Replace the "goto errregulatorfree" by the actu...

Siemens SIMATIC S7-1500 Improper Validation of Specified Type of Input (CVE-2024-35809)

In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Linux Distros Unpatched Vulnerability : CVE-2025-40208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom- iris aa00000.video-codec: Direct firmware load for...

CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

UBUNTU-CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

CVE-2023-7326 Epson Stylus SX510W Printer Remote Power Off DoS

The Epson Stylus SX510W embedded web management service fails to properly handle consecutive ampersand characters in query parameters when accessing /PRESENTATION/HTML/TOP/INDEX.HTML. A remote attacker can send a malformed request that triggers improper input parsing or memory handling, resulting...

CVE-2025-40208

CVE-2025-40208 is tied to the Linux kernel Iris media driver (qcom-iris). The public descriptions show a fix for module removal when firmware download/load fails (Direct firmware load for qcom/vpu/vpu33_p4.mbn failed with error -2; downstream init/core deinit messages; unbind path). Affected stac...