CVE-2025-40311 accel/habanalabs: support mapping cb with vmalloc-backed coherent memory

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled, dmaalloccoherent with GFPUSER may return addresses from the vmalloc range. If such an address is mapped without VMMIXEDMAP,...

CVE-2025-40301

The CVE-2025-40301 issue concerns the Linux kernel Bluetooth stack. In hci_cmd_complete_evt(), when an unknown command opcode is reported, the code may treat the first byte of remaining skb->data as the return status. If parameters were already pulled in hci_event_func(), skb may be empty, cau...

SUSE CVE-2025-40274

In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Remove bindings on memslot deletion when gmem is dying When unbinding a memslot from a guestmemfd instance, remove the bindings even if the guestmemfd file is dying, i.e. even if its file refcount has gone to zer...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a hidraw device reference count data contention, which could lead to memory security issues...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the possibility that TCPServerInfo::hostname may be reused after being freed, potentially leading to memor...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from out-of-bounds accesses to gpio register arrays, which could lead to memory security issues...

The Evolution of Agentic AI in Cybersecurity: From Single LLM Reasoners to Multi-Agent Systems and Autonomous Pipelines

Cybersecurity has become one of the earliest adopters of agentic AI, as security operations centers increasingly rely on multi-step reasoning, tool-driven analysis, and rapid decision-making under pressure. While individual large language models can summarize alerts or interpret unstructured...

CLSA-2025-1765012494 gimp: Fix of 2 CVEs

CVE-2025-10922: fix heap-based buffer overflow in DCM file parser by adding safety checks and proper GError handling to prevent potential RCE - CVE-2025-10934: fix heap-based buffer overflow in XWD file parser by validating colormap offsets to prevent potential RCE...

OmniSafeBench-MM: A Unified Benchmark and Toolbox for Multimodal Jailbreak Attack-Defense Evaluation

Recent advances in multi-modal large language models MLLMs have enabled unified perception-reasoning capabilities, yet these systems remain highly vulnerable to jailbreak attacks that bypass safety alignment and induce harmful behaviors. Existing benchmarks such as JailBreakV-28K, MM-SafetyBench,...

PT-2025-49384

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth component of the Linux kernel, specifically within the btusb disconnect function. The issue occurs because data associated with a Bluetooth...

TeleAI-Safety: A Comprehensive LLM Jailbreaking Benchmark Towards Attacks, Defenses, and Evaluations

While the deployment of large language models LLMs in high-value industries continues to expand, the systematic assessment of their safety against jailbreak and prompt-based attacks remains insufficient. Existing safety evaluation benchmarks and frameworks are often limited by an imbalanced...

LLM Causality Analysis Framework

A comprehensive framework for multi-level causality analysis in Large Language Models LLMs, enabling systematic investigation of safety mechanisms and misbehavior detection across token, neuron, layer, and representation levels. Includes the whitepaper 2512.04841.pdf titled SoK: A Comprehensive...

openSUSE 16 Security Update : mozjs128 (openSUSE-SU-2025-20135-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20135-1 advisory. - Update to version 128.14.0 bsc1248162: - CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component - CVE-2025-918...

The vulnerability in the driver drbd/drbd_receiver.c of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the driver drbd/drbdreceiver.c of the Linux operating system relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...

Fedora 43 : CuraEngine (2025-19c65f1d15)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-19c65f1d15 advisory. - Rebuilt with latest patched stbimage: memory-safety fixes Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 42 : CuraEngine (2025-fc872e9426)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-fc872e9426 advisory. - Rebuilt with latest patched stbimage: memory-safety fixes Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora: Security Advisory (FEDORA-2025-f0df882417)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : timg (2025-d2b7d94014)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d2b7d94014 advisory. Rebuilt with latest patched stbimage: memory-safety fixes Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 42 : timg (2025-f0df882417)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-f0df882417 advisory. Rebuilt with latest patched stbimage: memory-safety fixes Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora: Security Advisory (FEDORA-2025-d2b7d94014)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...