11960 matches found
UBUNTU-CVE-2025-38565
In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perfmmap fail When perfmmap fails to allocate a buffer, it still invokes the eventmapped callback of the related event. On X86 this might increase the perfrdpmcallowed reference counter. But nothing undoe...
UBUNTU-CVE-2025-38563
In the Linux kernel, the following vulnerability has been resolved: perf/core: Prevent VMA split of buffer mappings The perf mmap code is careful about mmap'ing the user page with the ringbuffer and additionally the auxiliary buffer, when the event supports it. Once the first mapping is...
CVE-2025-38565 perf/core: Exit early on perf_mmap() fail
In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perfmmap fail When perfmmap fails to allocate a buffer, it still invokes the eventmapped callback of the related event. On X86 this might increase the perfrdpmcallowed reference counter. But nothing undoe...
CVE-2025-38565
CVE-2025-38565: In the Linux kernel perf_mmap() path, if buffer allocation fails the code still invokes event_mapped(), which can increment perf_rdpmc_allowed on x86 and leaks references because perf_mmap_close() is not called. The documented fix is to return early on failure to prevent the refer...
CVE-2025-38565 perf/core: Exit early on perf_mmap() fail
In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perfmmap fail When perfmmap fails to allocate a buffer, it still invokes the eventmapped callback of the related event. On X86 this might increase the perfrdpmcallowed reference counter. But nothing undoe...
Security update for container-suseconnect
This update for container-suseconnect rebuilds it with the last go1.24 security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linu...
Linux Distros Unpatched Vulnerability : CVE-2025-38489
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpfarchtextpoke with newaddr == NULL again Commit 7ded842b356d s390/bpf: Fix...
Denial Of Service (DoS)
OpenEXR is vulnerable to denial of service DoS. The vulnerability is due to improper input validation due to trusting unvalidated dataWindow size values from file headers, leading to excessive memory allocation and performance degradation...
Lenovo 510 FHD和Lenovo Performance FHD 安全漏洞
Lenovo 510 FHD and Lenovo Performance FHD are both HD cameras from Lenovo China. A security vulnerability exists in the Lenovo 510 FHD and Lenovo Performance FHD that stems from a physical access that could lead to arbitrary firmware updates...
CVE-2025-4371: Improper Verification of Cryptographic Signature
A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to write arbitrary firmware updates to the device over a USB connection...
Attack Graph Generation on HPC Clusters
Attack graphs AGs are graphical tools to analyze the security of computer networks. By connecting the exploitation of individual vulnerabilities, AGs expose possible multi-step attacks against target networks, allowing system administrators to take preventive measures to enhance their network's...
Linux Distros Unpatched Vulnerability : CVE-2025-38424
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: Fix sample vs doexit Baisheng Gao reported an ARM64 crash, which Mark decoded as being a synchronous external abort -- most likely due to trying to access...
Linux Distros Unpatched Vulnerability : CVE-2023-53065
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix perfoutputbegin parameter is incorrectly invoked in perfeventbpfoutput...
Linux Distros Unpatched Vulnerability : CVE-2020-14790
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PS. Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior...
Malicious code in @zalastax/nolb-_functions-io-labs-performance_test (npm)
The package @zalastax/nolb-functions-io-labs-performancetest was found to contain malicious code...
Malicious code in hw-performance-tracking (npm)
The package hw-performance-tracking was found to contain malicious code...
Malicious code in performance-parts (npm)
The package performance-parts was found to contain malicious code...
Malicious code in performance-server (npm)
The package performance-server was found to contain malicious code...