PT-2025-39278

Name of the Vulnerable Software and Affected Versions versions prior to 2025-47315 Description A memory corruption issue exists when handling repeated memory unmap requests originating from a guest virtual machine. Recommendations At the moment, there is no information about a newer version that...

Qualcomm Chipsets Resource Management Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when processing guest VM messages...

PT-2025-39266

Name of the Vulnerable Software and Affected Versions Versions prior to 2025 Description A memory corruption issue exists when parameters are passed to the Trusted Virtual Machine during the handshake process. Recommendations At the moment, there is no information about a newer version that...

ThinkPad Elliptic Labs Virtual Lock Sensor Privilege Escalation

The vulnerability of the Elliptic Labs Virtual Lock Sensor microprogramming software in ThinkPad laptops is related to incorrect permissions. Exploiting this vulnerability can allow attackers to gain increased privileges...

Qualcomm Chipsets Resource Management Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets, which arises from memory corruption when processing duplicate memory unmapping requests from a guest virtual machine...

PT-2025-39276

Name of the Vulnerable Software and Affected Versions versions prior to 2025-27077 Description A memory corruption issue exists when processing messages within a guest virtual machine. The issue may lead to unpredictable behavior or system compromise. Recommendations At the moment, there is no...

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption that occurs when parameters are passed to the Trusted Virtual Machine during a handshake...

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a failure to maintain cache coherency when loading PIL-certified VMs, which could lead to memory corruption...

CVE-2025-21476: Buffer Copy without Checking Size of Input

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

PT-2025-39303

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches affected versions not specified Description A flaw exists in the access control list ACL programming that could allow a remote attacker to bypass a configured ACL on an...

PT-2025-39272

Name of the Vulnerable Software and Affected Versions versions prior to 2025-27032 Description A memory corruption issue exists when loading a Picture Interchange Language PIL authenticated Virtual Machine VM. This occurs when an authenticated VM image is loaded without maintaining cache coherenc...

PT-2025-39337

Name of the Vulnerable Software and Affected Versions Omni versions prior to 0.48.0 Description Omni, a Kubernetes management platform, has a potential issue where the Wireguard SideroLink component could be exploited to allow unauthorized packet transmission. The system establishes a peer-to-pee...

Security update for kernel-livepatch-MICRO-6-0_Update_3

This update for kernel-livepatch-MICRO-6-0Update3 fixes the following issues: CVE-2025-38177: kernel: schhfsc: make hfscqlennotify idempotent bsc1246356 CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow bsc1245685 CVE-2025-38181: calipso: fix null-ptr-deref in calipsoreqset,delatt...

Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

This update for kernel-livepatch-MICRO-6-0-RTUpdate6 fixes the following issues: CVE-2025-38177: kernel: schhfsc: make hfscqlennotify idempotent bsc1246356 CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow bsc1245685 CVE-2025-38181: calipso: fix null-ptr-deref in...

SUSE-SU-2025:20735-1 Security update for kernel-livepatch-MICRO-6-0_Update_8

This update for kernel-livepatch-MICRO-6-0Update8 fixes the following issues: - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow bsc1245685 - CVE-2025-38181: calipso: fix null-ptr-deref in calipsoreqset,delattr bsc1246001 - CVE-2025-38498: dochangetype: refuse to operate on...

CVE-2025-39883 mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory

In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix VMBUGONPAGEPagePoisonedpage when unpoison memory When I did memory failure tests, below panic occurs: page dumped because: VMBUGONPAGEPagePoisonedpage kernel BUG at include/linux/page-flags.h:616! Oops:...

Mitsubishi Electric MELSEC-Q Series CPU Module

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial of service DoS. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all...

DHCP: DHCP routing options can manipulate interface-based VPN traffic

DHCP can add routes to a client’s routing table via the classless static route option 121. VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify...

GHSA-F372-9RCJ-8W2C Liferay Portal and DXP allows users to add a note to a different virtual instance

Insecure Direct Object Reference IDOR vulnerability with commerce order notes in Liferay Portal 7.3.5 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote authenticated users to from one virtual instance to add a...

RHEL 9 : NetworkManager (RHSA-2025:16411)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16411 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when...