CVE-2025-68793

CVE-2025-68793 affects the Linux kernel’s AMDGPU GPU recovery path. The issue is a race between the sched timeout callback and the tdr work queue during gpu recovery, where drm_sched_start() can resume the tdr queue and later free a job, risking a use-after-free on the pasid if the timeout comple...

CVE-2025-68793 drm/amdgpu: fix a job->pasid access race in gpu recovery

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job-pasid access race in gpu recovery Avoid a possible UAF in GPU recovery due to a race between the sched timeout callback and the tdr work queue. The gpu recovery function calls drmschedstop and later...

CVE-2025-68793

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job-pasid access race in gpu recovery Avoid a possible UAF in GPU recovery due to a race between the sched timeout callback and the tdr work queue. The gpu recovery function calls drmschedstop and later...

CVE-2025-68793 drm/amdgpu: fix a job->pasid access race in gpu recovery

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job-pasid access race in gpu recovery Avoid a possible UAF in GPU recovery due to a race between the sched timeout callback and the tdr work queue. The gpu recovery function calls drmschedstop and later...

CVE-2025-68790 net/mlx5: Fix double unregister of HCA_PORTS component

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix double unregister of HCAPORTS component Clear hcadevcomcomp in device's private data after unregistering it in LAG teardown. Otherwise a slightly lagging second pass through mlx5unloadone might try to unregister it...

CVE-2025-68790

CVE-2025-68790 concerns the Linux kernel mlx5 driver (net/mlx5). The root cause is that the HCA_PORTS devcom component is not cleared from the device private data after it is unregistered during LAG teardown. This can cause a use-after-free when a second pass through mlx5_unload_one() occurs, suc...

CVE-2025-68769

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix return value of f2fsrecoverfsyncdata With below scripts, it will trigger panic in f2fs: mkfs.f2fs -f /dev/vdd mount /dev/vdd /mnt/f2fs touch /mnt/f2fs/foo sync echo 111 /mnt/f2fs/foo f2fsio fsync /mnt/f2fs/foo f2fsio...

Astra Linux – Vulnerability in openssl, edk2

Issue summary: A timing side-channel that could potentially allow the recovery of the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow an attacker to recover the private key. However, measuring the timing woul...

EaseUS Data Recovery 代码问题漏洞

EaseUS Data Recovery is a data recovery software from EaseUS. A code issue vulnerability exists in EaseUS Data Recovery version 15.1.0.0, which stems from the unquoted path to the EaseUS UPDATE SERVICE executable service, which could lead to an attacker injecting and executing malicious code and...

Dell SupportAssist OS Recovery 安全漏洞

Dell SupportAssist OS Recovery is a Dell USA company that provides a recovery environment that contains tools for diagnosing and resolving problems that may occur before the computer boots into the operating system. A security vulnerability exists in Dell SupportAssist OS Recovery versions prior ...

PT-2026-2390

Name of the Vulnerable Software and Affected Versions EaseUS Data Recovery version 15.1.0.0 Description EaseUS Data Recovery 15.1.0.0 has an issue with an unquoted service path in the EaseUS UPDATE SERVICE executable. This allows attackers to inject and execute malicious code with elevated...

Linux Distros Unpatched Vulnerability : CVE-2025-68793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job-pasid access race in gpu recovery Avoid a possible UAF in GPU recovery...

Dell SupportAssist OS Recovery 安全漏洞

Dell SupportAssist OS Recovery is a Dell USA company that provides a recovery environment that contains tools for diagnosing and resolving problems that may occur before the computer boots into the operating system. A security vulnerability exists in Dell SupportAssist OS Recovery versions prior ...

PT-2026-2465

Name of the Vulnerable Software and Affected Versions Dell SupportAssist OS Recovery versions prior to 5.5.15.1 Description Dell SupportAssist OS Recovery contains a flaw related to the creation of temporary files with insecure permissions. A local attacker with low privileges could potentially...

PT-2026-2593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to shmem recovery during rename failures. Maple tree insertions can fail under memory pressure, and the simple offset rename and simple offset...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a readahead recovery deadlock issue in fuse, which could lead to a deadlock...

CVE-2025-41077

IDOR vulnerability has been found in Viafirma Inbox v4.5.13 that allows any authenticated user without privileges in the application to list all users, access and modify their data. This allows the user's email addresses to be modified and, subsequently, using the password recovery functionality ...

CVE-2025-41077 Multiple vulnerabilities in Viafirma products

IDOR vulnerability has been found in Viafirma Inbox v4.5.13 that allows any authenticated user without privileges in the application to list all users, access and modify their data. This allows the user's email addresses to be modified and, subsequently, using the password recovery functionality ...

EUVD-2026-1931

IDOR vulnerability has been found in Viafirma Inbox v4.5.13 that allows any authenticated user without privileges in the application to list all users, access and modify their data. This allows the user's email addresses to be modified and, subsequently, using the password recovery functionality ...

CVE-2025-41077

CVE-2025-41077 affects Viafirma Inbox v4.5.13 with an Insecure Direct Object Reference (IDOR) flaw. The vulnerability allows any authenticated, unprivileged user to list all users, access and modify their data (including emails) and then use password recovery to impersonate other users, potential...