br.com.thiagomoreira.liferay.plugins.fix-virtual-host-app:fix-virtual-host-hook (5.0.0) potentially affected by CVE-2025-43793 via com.liferay.portal:com.liferay.portal.kernel (10.6.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 10.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: -...

br.com.thiagomoreira.liferay.plugins.fix-virtual-host-app:fix-virtual-host-hook (5.1.0), com.liferay.portal:com.liferay.portal.impl (41.0.0) potentially affected by CVE-2025-43793 via com.liferay.portal:com.liferay.portal.kernel (41.0.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 41.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: -...

br.com.thiagomoreira.liferay.plugins.fix-virtual-host-app:fix-virtual-host-hook (5.0.1), com.liferay.portal:com.liferay.portal.impl (29.0.0) potentially affected by CVE-2025-43793 via com.liferay.portal:com.liferay.portal.kernel (29.0.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 29.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: -...

br.com.thiagomoreira.liferay.plugins.fix-virtual-host-app:fix-virtual-host-hook (4.1.0), com.liferay.portal:com.liferay.portal.test (6.10.1) +1 more potentially affected by CVE-2025-43793 via com.liferay.portal:com.liferay.portal.kernel (6.10.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 6.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: -...

br.com.thiagomoreira.liferay.plugins.fix-virtual-host-app:fix-virtual-host-hook (5.0.0) potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (10.6.1)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 10.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: -...

br.com.thiagomoreira.liferay.plugins.fix-virtual-host-app:fix-virtual-host-hook (2.0.0), br.com.thiagomoreira.liferay.plugins.markdown-display-app:markdown-display-app (>=2.0.0, <=2.1.0) +15 more potentially affected by CVE-2025-43792 via com.liferay.portal:com.liferay.portal.kernel (3.0.0)

com.liferay.portal:com.liferay.portal.kernel MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.kernel and may be impacted: -...

CVE-2023-53259

In the Linux kernel, the following vulnerability has been resolved: VMCI: check context-notifypage after call to getuserpagesfast to avoid GPF The call to getuserpagesfast in vmcihostsetupnotify can return NULL context-notifypage causing a GPF. To avoid GPF check if context-notifypage == NULL and...

CVE-2023-53245

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device is handled by the...

DEBIAN-CVE-2023-53245

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device is handled by the...

DEBIAN-CVE-2022-50303

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix double release compute pasid If kfdprocessdeviceinitvm returns failure after vm is converted to compute vm and vm-pasid set to compute pasid, KFD will not take pdd-drmfile reference. As a result, drm close file...

UBUNTU-CVE-2023-53256

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix FFA device names for logical partitions Each physical partition can provide multiple services each with UUID. Each such service can be presented as logical partition with a unique combination of VM ID and...

UBUNTU-CVE-2023-53245

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device is handled by the...

CVE-2022-50338

The CVE-2022-50338 entry concerns a Linux kernel binder UAF in a race between binder_update_page_range() and munmap() that can access alloc-&gt;vma after it is freed. Affected component: kernel Binder in Linux kernel (stable branches 5.4 and 5.10). Root cause: improper locking around mmap/vma han...

CVE-2023-53259 VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF

In the Linux kernel, the following vulnerability has been resolved: VMCI: check context-notifypage after call to getuserpagesfast to avoid GPF The call to getuserpagesfast in vmcihostsetupnotify can return NULL context-notifypage causing a GPF. To avoid GPF check if context-notifypage == NULL and...

CVE-2023-53256

CVE-2023-53256 resolves a Linux kernel issue in the firmware/arm_ffa path where device names for logical partitions could collide. The root cause was that the device name used by FFA partitions included only the VM ID, while UUIDs were kept in partition info, causing sysfs errors like “cannot cre...

CVE-2023-53256 firmware: arm_ffa: Fix FFA device names for logical partitions

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix FFA device names for logical partitions Each physical partition can provide multiple services each with UUID. Each such service can be presented as logical partition with a unique combination of VM ID and...

CVE-2023-53245 scsi: storvsc: Fix handling of virtual Fibre Channel timeouts

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device is handled by the...

CVE-2023-53245

CVE-2023-53245 refers to the Linux kernel Hyper-V StorVSC integration for virtual Fibre Channel timeouts. The issue arises from a faulty integration where the FC transport timeout handler (fc_eh_timed_out()) could dereference a NULL rport, causing a kernel panic. The published fix removes the cal...

CVE-2023-53245 scsi: storvsc: Fix handling of virtual Fibre Channel timeouts

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device is handled by the...

CVE-2022-50307

In CVE-2022-50307, the Linux kernel s390/cio subsystem had an out-of-bounds read during cio_ignore free scans. The bug arose from an optimization that excluded online devices from scans, incorrectly assuming I/O-subchannel drvdata pointed to a private struct, which is invalid for devices bound to...