CVE-2025-36907

In drawsurfaceimage of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege via USB fastboot, after a bootloader unlock, with no additional execution privileges needed. User interaction is needed for...

PT-2025-36390

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description Improper input validation for DIMM serial presence detect SPD metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of...

CVE-2024-36354: Improper Prevention of Lock Bit Modification

Improper input validation for DIMM serial presence detect SPD metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at...

AZL-66959 CVE-2025-39724 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR Receive Buffer Register while the FIFO is enabled. In...

AZL-74180 CVE-2025-39724 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR Receive Buffer Register while the FIFO is enabled. In...

DEBIAN-CVE-2025-39724

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR Receive Buffer Register while the FIFO is enabled. In...

CVE-2025-39724

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR Receive Buffer Register while the FIFO is enabled. In...

DEBIAN-CVE-2025-39711

In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing meicldevdisable calls Both the ACE and CSI driver are missing a meicldevdisable call in their remove function. This causes the meicl client to stay part of the meidevice-filelist...

UBUNTU-CVE-2025-39724

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR Receive Buffer Register while the FIFO is enabled. In...

CVE-2025-39724 serial: 8250: fix panic due to PSLVERR

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR Receive Buffer Register while the FIFO is enabled. In...

CVE-2025-39724

CVE-2025-39724 affects the Linux kernel serial 8250 driver. When PSLVERR_RESP_EN=1, an error response can be generated reading an empty RBR with FIFO enabled due to a race in serial8250_do_startup/DW paths. The fix wraps serial_port_out(port, UART_LCR, UART_LCR_WLEN8) under port->lock to preve...

CVE-2025-39724 serial: 8250: fix panic due to PSLVERR

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR Receive Buffer Register while the FIFO is enabled. In...

MAL-2025-44914 Malicious code in kssd-vol4-debug-serial-erlinglingling-erlinglinger (npm)

The package kssd-vol4-debug-serial-erlinglingling-erlinglinger was found to contain malicious code...

Malicious code in kssd-vol4-debug-serial-erlinglingliu-erlingyiyi (npm)

The package kssd-vol4-debug-serial-erlinglingliu-erlingyiyi was found to contain malicious code...

Malicious code in kssd-vol4-debug-serial-erlinglingling-erlinglinger (npm)

The package kssd-vol4-debug-serial-erlinglingling-erlinglinger was found to contain malicious code...

Malicious code in kssd-vol4-debug-serial-erlinglingsan-erlinglingwu (npm)

The package kssd-vol4-debug-serial-erlinglingsan-erlinglingwu was found to contain malicious code...

MAL-2025-44916 Malicious code in kssd-vol4-debug-serial-erlinglingsan-erlinglingwu (npm)

The package kssd-vol4-debug-serial-erlinglingsan-erlinglingwu was found to contain malicious code...

MAL-2025-44915 Malicious code in kssd-vol4-debug-serial-erlinglingliu-erlingyiyi (npm)

The package kssd-vol4-debug-serial-erlinglingliu-erlingyiyi was found to contain malicious code...

The vulnerability of the config_group_find_item() function in the Linux kernel’s USB component allows a hacker to induce a service failure.

The vulnerability of the configgroupfinditem function in the Linux kernel’s USB component is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the composite_dev_cleanup() function in the Linux kernel’s USB component allows a hacker to trigger a service failure.

The vulnerability of the compositedevcleanup function in the Linux kernel’s USB component is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...