Security update for kernel-livepatch-MICRO-6-0_Update_3

This update for kernel-livepatch-MICRO-6-0Update3 fixes the following issues: CVE-2025-38087: net/sched: fix use-after-free in tapriodevnotifier bsc1245505 CVE-2025-21999: proc: fix UAF in procgetinode bsc1242579 CVE-2025-38001: netsched: hfsc: Address reentrant enqueue adding class to eltree twi...

CVE-2025-39736: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving prwarn outside kmemleaklock When netpoll is enabled, calling prwarnonce while holding kmemleaklock in mempoolalloc can cause a deadlock due to lock inversion with the netconsole subsystem. Th...

ALSA-2025:15661 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/vkms: Fix use after free and double free on init error CVE-2025-22097 kernel: scsi: lpfc: Use memcpy for BIOS version CVE-2025-38332 kernel: posix-cpu-timers: fix race between...

The vulnerability of the Local Security Authority Subsystem Service in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Local Security Authority Subsystem Service in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux Distros Unpatched Vulnerability : CVE-2016-6737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2025-26675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. CVE-2025-26675 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2016-6753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in Android before 2016-11-0...

CVE-2025-55228

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to execute code locally...

CVE-2025-55224

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to execute code locally...

CVE-2025-54894

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

CVE-2025-54894

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

CVE-2025-53809 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

...

CVE-2025-53809

CVE-2025-53809 affects Windows Local Security Authority Subsystem Service (LSASS). The issue is an improper input validation in LSASS that enables an authenticated attacker to trigger a network-based Denial of Service. Public exploitation is listed by threat intel sources. The fix is included in ...

CVE-2025-54894 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

...

CVE-2025-54894 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

...

CVE-2025-54894

CVE-2025-54894 is described as Local Security Authority Subsystem Service Elevation of Privilege, but no concrete technical details (affected product/version/root cause) are provided in the connected documents; monitor for updates.

Windows Graphics Component Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to execute code locally...

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

...

SUSE-SU-2025:03116-1 Security update for microcode_ctl

This update for microcodectl fixes the following issues: - Intel CPU Microcode was updated to the 20250812 release bsc1248438 - CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable...

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506008 fixes several issues. The following security issues were fixed: CVE-2025-38087: net/sched: fix use-after-free in tapriodevnotifier bsc1245504 . CVE-2025-21999: proc: fix UAF in procgetinode bsc1242579. CVE-2025-38001: netsched: hfsc: Address reentran...