CVE-2025-32022

Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects...

OPENSUSE-SU-2025:0145-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 136.0.7103.48 stable release 2025-04-29 boo1242153 CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11 CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09...

CVE-2025-4287

A problematic vulnerability has been identified in PyTorch version 2.6.0 with CUDA 12.4. The affected component is the torch.cuda.nccl.reduce function within the torch/cuda/nccl.py file. Exploitation of this vulnerability can lead to a denial-of-service condition. The attack can be launched from...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21943)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21943 advisory. - In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21943)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21943 advisory. - In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr...

PT-2025-19852 · Qualcomm · Snapdragon +14

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption in the camera kernel when a large number of devices are connected through userspace. This corruption occurs due to the handling of multiple device...

CVE-2022-49837

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix memory leaks in checkfunccall kmemleak reports this issue: unreferenced object 0xffff88817139d000 size 2048: comm "testprogs", pid 33246, jiffies 4307381979 age 45851.820s hex dump first 32 bytes: 01 00 00 00 00 00 00 00...

CVE-2025-37782

CVE-2025-37782 affects the kernel package for versions earlier than 6.6.92.2-1. An upgraded kernel version (≥ 6.6.92.2-1) resolves the issue. No exploit details are provided in the connected documents. If using affected distributions, upgrade to the specified kernel version to mitigate.

CVE-2025-37782

...

CVE-2025-23147 i3c: Add NULL pointer check in i3c_master_queue_ibi()

In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3cmasterqueueibi The I3C master driver may receive an IBI from a target device that has not been probed yet. In such cases, the master calls i3cmasterqueueibi to queue an IBI work task, leading to...

DLA-4126-2 jinja2 - regression update

Bulletin has no description...

CVE-2025-30194

A flaw was found in DNSdist's DoH implementation using the nghttp2 provider. This vulnerability allows denial of service via a specially crafted DoH exchange that triggers a double-free memory error. Mitigation Mitigation for this issue is either not available or the currently available options d...

VIMU: Effective Physics-Based Realtime Detection and Recovery against Stealthy Attacks on UAVs

Sensor attacks on robotic vehicles have become pervasive and manipulative. Their latest advancements exploit sensor and detector characteristics to bypass detection. Recent security efforts have leveraged the physics-based model to detect or mitigate sensor attacks. However, these approaches are...

CVE-2025-46687

quickjs-ng through 0.9.0 has a missing length check in JSReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

Virtuozzo Hybrid Infrastructure 6.3 Update 1 Hotfix 2 (6.3.1-121)

This update provides stability fixes. Vulnerability id: VSTOR-88806 Live migration failed for VMs with both vstorage and iSCSI volumes. Vulnerability id: VSTOR-89155 Fixed the false-positive alerts "Virtual machine state mismatch" and "Volume attachment details mismatch." Vulnerability id:...

CVE-2025-43966

A flaw was found in libheif. In affected versions, a NULL pointer dereference occurs in ImageItemiden in image-items/iden.cc. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use an...

CVE-2025-43929

A flaw was found in kitty. This vulnerability allows arbitrary code execution via execution of a locally linked executable without user confirmation. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2025-32415

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used. Mitigation...

CVE-2025-22123 f2fs: fix to avoid accessing uninitialized curseg

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid accessing uninitialized curseg syzbot reports a f2fs bug as below: F2FS-fs loop3: Stopped filesystem due to reason: 7 kworker/u8:7: attempt to access beyond end of device BUG: unable to handle page fault for...

CVE-2025-3573

A flaw was found in the jquery-validation package. This vulnerability allows Cross-site scripting XSS via a user-controlled placeholder value passed to the showLabel function, which populates messages using the $.validator.messages dictionary. Mitigation Mitigation for this issue is either not...