An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a polling and separation operation contention condition that could lead to reuse after release...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the habanalabs driver not handling file descriptors correctly when exporting dmabuf, which could lead to reuse...

drm/i915: Fix a memory leak with reused mmap_offset

...

CVE-2025-9901 Libsoup: improper handling of http vary header in libsoup caching

A flaw was found in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be...

CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items...

PT-2025-35682

Name of the Vulnerable Software and Affected Versions: ThemeManager versions prior to SMR Sep-2025 Release 1 Description: Improper privilege management in ThemeManager allows local privileged attackers to reuse trial items. Recommendations: Update ThemeManager to SMR Sep-2025 Release 1 or later...

Envoy 资源管理错误漏洞

Envoy is an Enphase open source gateway program for connecting smart home devices. A resource management error vulnerability exists in Envoy versions 1.34.0 through 1.34.4 and 1.35.0, which stems from the presence of post-release reuse in the DNS cache and could result in an abnormal process...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Sep-2025 Release 1, which stems from improper privilege management and...

Linux Distros Unpatched Vulnerability : CVE-2021-3144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. They might be used to run command against the salt master or minions...

MediaTek Modem 资源管理错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A resource management error vulnerability exists in MediaTek Modem that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...

Vulnerability of the ubi_create_volume() function in the drivers/mtd/ubi/vmt.c module – This driver is a part of the Linux operating system’s memory support mechanism for the kernel. It allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

Vulnerability of the ubicreatevolume function in the drivers/mtd/ubi/vmt.c module – The Linux kernel’s memory support driver involves reusing previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Vulnerability of the cc_cipher_exit() function in the drivers/crypto/ccree/cc_cipher.c module – The driver for the Linux kernel’s cryptographic accelerator, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the cccipherexit function in the drivers/crypto/ccree/cccipher.c module – Linux’s cryptographic acceleration driver is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

MediaTek Modem 资源管理错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A resource management error vulnerability exists in MediaTek Modem that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...

MediaTek Modem 资源管理错误漏洞

MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A resource management error vulnerability exists in MediaTek Modem that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...

The vulnerability of the bfq_setup_merge() function in the block/bfq-iosched.c module exposes the block-level kernel support of the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bfqsetupmerge function in the block/bfq-iosched.c module related to Linux kernel’s block-level support involves the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...

CVE-2025-4644

A Session Fixation vulnerability existed in Payload's SQLite adapter due to identifier reuse during account creation. A malicious attacker could create a new account, save its JSON Web Token JWT, and then delete the account, which did not invalidate the JWT. As a result, the next newly created us...

CVE-2025-4643

Payload uses JSON Web Tokens JWT for authentication. After log out JWT is not invalidated, which allows an attacker who has stolen or intercepted token to freely reuse it until expiration date which is by default set to 2 hours, but can be changed. This issue has been fixed in version 3.44.0 of...