CVE-2025-40122

CVE-2025-40122 relates to the Linux kernel perf_x86/intel PMU and the IA32_PMC_x_CFG_B MSR access error observed on PTL. The issue arises when configuring ACR (auto counter reload) masks via perf events: an incorrect check in intel_pmu_acr_late_setup() lets an invalid ACR counter mask be written ...

CVE-2025-40122 perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

Linux Distros Unpatched Vulnerability : CVE-2025-40122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes...

Security Advisory 0125

Security Advisory 0125 . CSAF PDF Date: November 11, 2025 Revision | Date | Changes ---|---|--- 1.0 | November 11, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-8870 CVSS:3.1 Base Score 4.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H CVSS:4.0 Base Score 5.6...

Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362

Cisco on Wednesday disclosed that it became aware of a new attack variant that's designed to target devices running Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software releases that are susceptible to CVE-2025-20333 and...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988896 advisory. In the Linux kernel, the following vulnerability has been resolved: devlink: fix netns refcount leak in devlinknlcmdreload While preparing my patch series adding net...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: fixuid, kustomize, mockery, petname, nodetaint, gcsfuse, go-bindata, renovate, sigstore-scaffolding, fulcio, terraform-provider-azuread, aws-sigv4-proxy, dbmate, cargobump, cfssl, timescaledb-parallel-copy, nsc, sbom-scorecard, docker-credential-acr-env, kubecolor,...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent, oras, kbld, harbor-registr...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent, oras, kbld, harbor-registr...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, oras, ip-masq-agent, kbld,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...

GHSA-JWMF-CHVC-RF92 vulnerabilities

Vulnerabilities for packages: dagdotdev, nri-prometheus, vault-secrets-webhook, opentofu, kaf, fixuid, kustomize, local-path-provisioner, rancher-loglevel, smarter-device-manager, mockery, falco-no-driver, falcosidekick, docker-cli-buildx, kube-state-metrics, petname, nodetaint, ip-masq-agent,...