CVE-2025-23159 media: venus: hfi: add a check to handle OOB in sfr region

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...

CVE-2025-23159: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...

Rsync Privilege Escalation

The vulnerability of the Rsync file transfer and synchronization utility is related to synchronization errors when using a shared resource during the processing of symbolic links. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2025-0467

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

GL.iNet Router security vulnerabilities

GL.iNet Router is a series of routers from China's Guanglian Zhitong GL.iNet company. A security vulnerability exists in GL.iNet Router that originates from a buffer overflow in the plugins.so file of the RPC Handler component...

ADM - CPU utilization is increasing and Debug is enabled

High Load on the CPU at Random time, collect the bundle and shared...

CVE-2023-44755

creationtimestamp| type| source ---|---|--- 2025-04-23 15:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114388062012835574...

PT-2025-17628

Name of the Vulnerable Software and Affected Versions: Intel Atom processors affected versions not specified Description: The issue is caused by a shared microarchitectural predictor state that influences transient execution for some Intel Atom processors. This may allow an authenticated user to...

OESA-2025-1435 cobbler security update

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors,...

CVE-2025-0467

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

CVE-2025-43703

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API even though the attacker has no knowledge of an API key through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists...

Imagination GPU Driver security vulnerabilities

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from kernel software in Guest VM that may utilize shared memory to write GPU firmware data...

Linux kernel SMB Client Buffer Overflow DoS

The vulnerability of the cifscomposemountoptions function in the fs/smb/client/cifsproto.h module, which is part of the SMB client support in Linux kernel, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the sockmaplookupsys function in the net/core/sockmap.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Qt encrypted() DoS

The vulnerability of the encrypted function in the cross-platform framework for Qt software development is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

drm_getunique() Function DRI Driver DoS

Vulnerability of the drmgetunique function in the drivers/gpu/drm/drmioctl.c module – The driver for Linux’s Direct Rendering Infrastructure DRI has a synchronization error when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

DEBIAN-CVE-2025-23129

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Clear affinity hint before calling ath11kpcicfreeirq in error path If a shared IRQ is used by the driver due to platform limitation, then the IRQ affinity hint is set right after the allocation of IRQ vectors in...

DEBIAN-CVE-2025-22128

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Clear affinity hint before calling ath12kpcifreeirq in error path If a shared IRQ is used by the driver due to platform limitation, then the IRQ affinity hint is set right after the allocation of IRQ vectors in...

CVE-2025-43703: Inclusion of Web Functionality from an Untrusted Source

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API even though the attacker has no knowledge of an API key through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists...

CVE-2025-43703

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API even though the attacker has no knowledge of an API key through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists...