Fedora 42 : samba (2025-7d890563f6)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7d890563f6 advisory. Update to Samba 4.22.6 - Security fix for CVE-2025-9640 and CVE-2025-10230 Tenable has extracted the preceding description block directly from the...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: bnxt: properly flushed XDP redirect lists We encountered the following crashes when testing the XDPREDIRECT feature in production: 56251.579676 listadd corruption. next-prev should be prev ffff93120dd40f30, but was...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: exfat: Added a check for the cluster chain loop in dir functions. An infinite loop may occur if the following conditions occur due to file system corruption: 1 Condition for exfatcountdirEntries to loop infinitely: - The clust...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double-free when failing to DMA-map FW msg The semantics are that the caller of fbnicmbxmapmsg retains ownership of the message in case of an error. All existing callers properly free the allocated memory page...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fixed the buffer release/clearing order in the deferred receive path. A use-after-free condition was addressed by correcting the buffer release sequence in the deferred receive path. The code first released the RQ...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fixed NPD in arp,neighreduce, when using nexthop objects. When the “proxy” option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: pNFS: Fixed an issue where uninitialized pointers were dereferenced. The error occurs during the third attempt to encode extents. When the function exttreepreparecommit reallocates a larger buffer to retry encoding extents, th...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: The race condition related to PreauhHashValue has been fixed. If a client sends multiple session setup requests to ksmbd, a race condition related to PreauhHashValue may occur. There is no need to free sess-PreauhHashValue...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential use-of-memory errors in devlosstmocallbk. Smatch detected a potential use-of-memory of an ndlp object in devlosstmocallbk during driver unloading or fatal error handling. The issue was fixed by...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ice: Added a NULL check in the eswitch lag check. The function icelagisswitchdevrunning is called from outside the LAG event handler code. This results in lag-uppernetdev being NULL sometimes. To avoid dereferencing a NULL pointe...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ublk: It is necessary to sanitize the arguments from userspace when adding a device. The Sanity function checks the values for queue depth and the number of queues that we obtain from userspace when adding a device...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: smb: client: Fixed a warning when reconnecting a channel. When reconnecting a channel in smb2reconnectserver, a dummy tcon is passed to smb2reconnect using -queryinterface. This operation is uninitialized, so we cannot call...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: NFS: Fixed the setting of capabilities when automatically mounting a new filesystem. Capabilities cannot be inherited when crossing into a new filesystem. They need to be reset to their minimum defaults, and then checked again...

java-11-openj9-11.0.29.0-1.1 on GA media (moderate)

java-11-openj9-11.0.29.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15690-1 Rating: moderate Cross-References: CVE-2025-53057 CVSS scores: CVE-2025-53057 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-53057 SUSE : 8.2...

OESA-2025-2578 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

SUSE SLED15: himmelblau / himmelblau-sshd-config / libnss_himmelblau2 / etc (SUSE-SU-2025:3869-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3869-1 advisory. Update to version 0.7.18+git.0.8485a75. - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI esca...

SUSE: Security Advisory (SUSE-SU-2025:3855-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AZL-69404 CVE-2025-40103 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix refcount leak for cifssbtlink Fix three refcount inconsistency issues related to cifssbtlink. Comments for cifssbtlink state that cifsputtlink needs to be called after successful calls to cifssbtlink. Three calls...

AZL-69409 CVE-2025-40096 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drmschedjobaddresvdependencies When adding dependencies with drmschedjobadddependency, that function consumes the fence reference both on success and failure, so in the latter case the...

CVE-2025-62789

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.11.0, fimalert implementation does not check whether the return value of ctimer is NULL or not before calling strdup on it. A compromised agent can cause a crash of analysisd by sending a...