DEBIAN-CVE-2025-1936

jar: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content from the archive, but the fake extension after the null was used to determine the type of content. This could have been used to hide code in a web extension...

SUSE CVE-2025-21794

In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds read in usbcheckintendpoints Syzbot1 has detected a stack-out-of-bounds read of the epaddr array from hid-thrustmaster driver. This array is passed to usbcheckintendpoints function...

DEBIAN-CVE-2025-21794

In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds read in usbcheckintendpoints Syzbot1 has detected a stack-out-of-bounds read of the epaddr array from hid-thrustmaster driver. This array is passed to usbcheckintendpoints function...

AZL-57764 CVE-2025-21794 affecting package kernel for versions less than 6.6.79.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds read in usbcheckintendpoints Syzbot1 has detected a stack-out-of-bounds read of the epaddr array from hid-thrustmaster driver. This array is passed to usbcheckintendpoints function...

UBUNTU-CVE-2025-21794

In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds read in usbcheckintendpoints Syzbot1 has detected a stack-out-of-bounds read of the epaddr array from hid-thrustmaster driver. This array is passed to usbcheckintendpoints function...

CVE-2025-21794 HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()

In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds read in usbcheckintendpoints Syzbot1 has detected a stack-out-of-bounds read of the epaddr array from hid-thrustmaster driver. This array is passed to usbcheckintendpoints function...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netdevsim: A trailing zero was added to terminate the string in nsimnexthopbucketactivitywrite. This issue was identified by a static analyzer. We should not forget the trailing zero after copyfromuser if we will perform further...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: vpvdpa: fixed the issue where the idtable array was not terminated with a null terminator. Also, an additional virtiodeviceid was allocated as a null terminator. Otherwise, vdpamgmtdevgetclasses might iterate multiple times an...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Firmware: csdsp: Use strnlen on name fields in V1 wmfw files. Use strnlen instead of strlen for the algorithm and coefficient name string arrays in V1 wmfw files. In V1 wmfw files, the name is a NUL-terminated string stored in a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Tracing: Consider the NULL character when validating the event length. strlen returns the length of a string excluding the null byte. If the string length equals the maximum buffer length, there will be no space left in the buffe...

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: mm/pageowner: use strscpy instead of strlcpy current-comm is not a string no guarantee for a zero byte in it. strlcpys1, s2, l is calling strlens2, potentially causing out-of-bound access, as reported by syzbot: detected buffer...

SUSE CVE-2024-57880

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...

CVE-2024-57880

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...

CVE-2024-57880

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...

DEBIAN-CVE-2024-57880

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...

UBUNTU-CVE-2024-57880

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...

CVE-2024-57880 ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...

CVE-2024-57880 ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...

CVE-2024-57880

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Add space for a terminator into DAIs array The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full...

CVE-2024-53110

In the Linux kernel, the following vulnerability has been resolved: vpvdpa: fix idtable array not null terminated error Allocate one extra virtiodeviceid as null terminator, otherwise vdpamgmtdevgetclasses may iterate multiple times and visit undefined memory...