Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from post-release reuse in closefiletableids...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from reuse after release and could lead to a UAF vulnerability...

GO-2025-3671 ZITADEL Allows IdP Intent Token Reuse in github.com/zitadel/zitadel

ZITADEL Allows IdP Intent Token Reuse in github.com/zitadel/zitadel. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please suggest ...

CVE-2025-46743

An authenticated user's token could be used by another source after the user had logged out prior to the token expiring...

Alibaba Cloud Linux 3 : 0056: curl (ALINUX3-SA-2023:0056)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0056 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-27535: An authentication bypass...

CVE-2025-40566

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions V4.1 Update 3, SIMATIC PCS neo V5.0 All versions V5.0 Update 1. Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session...

CVE-2025-40566

CVE-2025-40566 affects Siemens SIMATIC PCS neo: v4.1 up to but excluding Update 3, and v5.0 up to but excluding Update 1. The root cause is improper invalidation of user sessions on logout, allowing a remote, unauthenticated attacker who obtained a legitimate session token to reuse that session a...

kernel: net: restrict SO_REUSEPORT to inet sockets

In the Linux kernel, the following vulnerability has been resolved: net: restrict SOREUSEPORT to inet sockets After blamed commit, crypto sockets could accidentally be destroyed from RCU call back, as spotted by zyzbot 1. Trying to acquire a mutex in RCU callback is not allowed. Restrict...

kernel: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list

A vulnerability was found in the Linux kernel's DMA engine component in the irqprocessworklist function. A possible use-after-free condition can occur during list iteration, which is because a descriptor may be freed while another thread is reusing it, potentially leading to access to freed memor...

Intel PROSet/Wireless Software 资源管理错误漏洞

Intel PROSet/Wireless Software is a wireless network card driver from Intel Corporation USA. A resource management error vulnerability exists in Intel PROSet/Wireless Software versions prior to 23.100, which stems from a reuse-after-release vulnerability that could lead to a denial-of-service...

PT-2025-20865 · Siemens · Simatic Pcs Neo

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions prior to V4.1 Update 3 SIMATIC PCS neo versions prior to V5.0 Update 1 Description: A vulnerability has been identified in SIMATIC PCS neo where affected products do not correctly invalidate user sessions upon user...

Siemens SIMATIC PCS neo 代码问题漏洞

Siemens SIMATIC PCS neo is a distributed control system from Siemens, Germany. A code issue vulnerability exists in Siemens SIMATIC PCS neo that originates from a user logging off and not properly disabling the session, which could lead to session reuse...

SUSE CVE-2025-32441

Rack is a modular Ruby web server interface. Prior to version 2.2.14, when using the Rack::Session::Pool middleware, simultaneous rack requests can restore a deleted rack session, which allows the unauthenticated user to occupy that session. Rack session middleware prepares the session at the...

The vulnerability in the cleanupTransaction() function of the fs/btrfs/transaction.c module of the btrfs file system support module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the cleanupTransaction function in the fs/btrfs/transaction.c module of the btrfs file system support in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the ath10k_htc_send_bundle() function in the drivers/net/wireless/ath/ath10k/htc.c module – A driver for Atheros/Qualcomm wireless adapter support in Linux operating systems, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the ath10khtcsendbundle function in the drivers/net/wireless/ath/ath10k/htc.c module – The Atheros/Qualcomm wireless adapter driver for Linux operating systems is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure to clean up vGIC resources when a vCPU creation fails, which could lead to a memory leak or reus...

Vulnerability of the zynqmp_qspi_exec_op() function in the drivers/spi/spi-zynqmp-gqspi.c module – This driver provides support for SPI devices in the Linux operating system’s kernel. It allows a hacker to cause a service failure.

Vulnerability of the zynqmpqspiexecop function in the drivers/spi/spi-zynqmp-gqspi.c module – The drivers for SPI devices in the Linux operating system involve reusing previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the amdkfd driver not synchronizing the cleanup of the user queue during a mode 1 reset, which could lead to...

The vulnerability of the sctp_sf_do_dupcook_a() function in the net/sctp/sm_statefuns.c module of the SCTP protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the sctpsfdodupcooka function in the net/sctp/smstatefuns.c module of the Linux operating system’s SCTP protocol implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2025-46336

Rack::Session is a session management implementation for Rack. In versions starting from 2.0.0 to before 2.1.1, when using the Rack::Session::Pool middleware, and provided the attacker can acquire a session cookie already a major issue, the session may be restored if the attacker can trigger a lo...