CVE-2023-53319 KVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle kvmarminit failure correctly in finalizepkvm Currently there is no synchronisation between finalizepkvm and kvmarminit initcalls. The finalizepkvm proceeds happily even if kvmarminit fails resulting in the...

CVE-2025-36244

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables...

CVE-2025-36244

IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due to improper initialization of critical variables...

AZL-67419 CVE-2025-39823 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use arrayindexnospec with indices that come from guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks clamps these values to mitigate speculative execution side-channels...

CVE-2025-39811 drm/xe/vm: Clear the scratch_pt pointer on error

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Clear the scratchpt pointer on error Avoid triggering a dereference of an error pointer on cleanup in xevmfreescratch by clearing any scratchpt error pointer. cherry picked from commit...

CVE-2023-53273

In the Linux kernel vulnerability CVE-2023-53273, the issue lies in the vmbus driver’s channel handling. The function relid2channel() assumes the vmbus channel array is allocated, but in multi-kernel scenarios (e.g., kdump/kexec), not all relids are reset by the host. If a guest receives a vmbus ...

Siemens SIMATIC NET CP, SINEMA and SCALANCE

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service DoS condition in the affected devices by exploiting integer overflow bugs. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

[SECURITY] Fedora 43 Update: qemu-10.1.0-6.fc43

qemu is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu acts as a virtual machine monitor together with the KVM kernel modules, and emulates the hardware for a full system such as a PC and its associated peripherals...

PT-2025-37994

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 through 7.3 IBM VIOS versions 3.1 through 4.1 Description IBM AIX and VIOS, when configured to use Kerberos network authentication, may allow a local user to gain root privileges by writing to files on the system due to...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock when cloning inline extents and using qgroups CVE-2021-46987 In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix another memory leak in error handling paths...

ArgusTech BILGER security vulnerabilities

ArgusTech BILGER is a virtual classroom management system from ArgusTech Turkey. A security vulnerability exists in ArgusTech BILGER versions prior to 2.4.6, which stems from the insertion of sensitive information in the sent data and could lead to a select message identifier attack...

ArgusTech BILGER security vulnerabilities

ArgusTech BILGER is a virtual classroom management system from ArgusTech Turkey. A security vulnerability exists in ArgusTech BILGER versions prior to 2.4.6, which stems from a user control key under user privileges leading to an authorization bypass that could potentially exploit trusted...

IBM AIX and IBM VIOS security vulnerabilities

IBM AIX and IBM VIOS are both products of the International Business Machines IBM Corporation.IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture.IBM VIOS is part of the PowerVm® Editions hardware feature. IBM VIOS is part of the PowerVm® Editions...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpifetchacpidev return value CVE-2022-50327 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix helper writes to read-only maps CVE-2024-49861 In the Linux...

Linux Distros Unpatched Vulnerability : CVE-2023-53259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VMCI: check context-notifypage after call to getuserpagesfast to avoid GPF The call to getuserpagesfast in vmcihostsetupnotify can return NULL context-notifypag...

SUSE CVE-2023-53245

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device is handled by the...

SUSE CVE-2023-53256

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix FFA device names for logical partitions Each physical partition can provide multiple services each with UUID. Each such service can be presented as logical partition with a unique combination of VM ID and...

br.com.thiagomoreira.liferay.plugins.fix-virtual-host-app:fix-virtual-host-hook (5.1.0), com.liferay.portal:com.liferay.portal.impl (41.0.0) potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (41.0.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 41.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: -...

br.com.thiagomoreira.liferay.plugins.fix-virtual-host-app:fix-virtual-host-hook (5.0.1), com.liferay.portal:com.liferay.portal.impl (29.0.0) potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (29.0.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 29.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: -...

br.com.thiagomoreira.liferay.plugins.fix-virtual-host-app:fix-virtual-host-hook (4.1.0), com.liferay.portal:com.liferay.portal.test (6.10.1) +1 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (6.10.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 6.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: -...