CVE-2025-21647 sched: sch_cake: add bounds checks to host bulk flow fairness counts

In the Linux kernel, the following vulnerability has been resolved: sched: schcake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of the per-host bulk flow counters, leading to an out ...

CVE-2025-21644

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix tlb invalidation when wedging If GuC fails to load, the driver wedges, but in the process it tries to do stuff that may not be initialized yet. This moves the xegttlbinvalidationinit to be done earlier: as its own doc...

CVE-2025-21643 netfs: Fix kernel async DIO

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel async DIO Netfslib needs to be able to handle kernel-initiated asynchronous DIO that is supplied with a biovec array. Currently, because of the async flag, this gets passed to netfsextractuseriter which throws a...

CVE-2025-21642 mptcp: sysctl: sched: avoid using current->nsproxy

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: sched: avoid using current-nsproxy Using the 'net' structure via 'current' is not recommended for different reasons. First, if the goal is to use it to read or write per-netns data, this is inconsistent with how th...

CVE-2025-21640 sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookiehmacalg: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

CVE-2025-21631 block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix wakerbfqq UAF after bfqsplitbfqq Our syzkaller report a following UAF for v6.6: BUG: KASAN: slab-use-after-free in bfqinitrq+0x175d/0x17a0 block/bfq-iosched.c:6958 Read of size 8 at addr ffff8881b57147d8 by task...

PT-2025-4325 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.13.0-rc4-xe+ Description: The issue is related to the Linux kernel's drm/xe component. When the GuC Graphics Unit Controller fails to load, the driver becomes unresponsive, but it attempts to perform actions...

SUSE SLES12 Security Update : libQtWebKit4 (SUSE-SU-2025:0139-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:0139-1 advisory. - CVE-2024-40779: Fixed heap buffer overflow in computeSampleUsingLinearInterpolation bsc1228693 Tenable has extracted the preceding description block...

SUSE SLES12 Security Update : apache2-mod_jk (SUSE-SU-2025:0143-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:0143-1 advisory. - Update to version 1.2.50: - CVE-2024-46544: Fixed incorrect default permissions vulnerabilitymay that could lead to information disclosure and/or...

CVE-2024-11146

TrueFiling is a collaborative, web-based electronic filing system where attorneys, paralegals, court reporters and self-represented filers collect public legal documentation into cases. TrueFiling is an entirely cloud-hosted application. Prior to version 3.1.112.19, TrueFiling trusted some...

git-2.48.1-1.1 on GA media (moderate)

git-2.48.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14652-1 Rating: moderate Cross-References: CVE-2024-50349 CVSS scores: CVE-2024-50349 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : rsync regression (USN-7206-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7206-2 advisory. USN-7206-1 fixed vulnerabilities in rsync. The update introduced a regression in rsync. This update...

grafana-11.3.0-5.1 on GA media (moderate)

grafana-11.3.0-5.1 on GA media Announcement ID: openSUSE-SU-2025:14654-1 Rating: moderate Cross-References: CVE-2025-21613 CVSS scores: CVE-2025-21613 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

CVE-2024-57889

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking If a device uses MCP23xxx IO expander to receive IRQs, the following bug can happen: BUG: sleeping function called from invalid context at...

CVE-2024-54031

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsethash: unaligned atomic read on struct nftsetext Access to genmask field in struct nftsetext results in unaligned atomic read: 72.130109 Unable to handle kernel paging request at virtual address ffff0000c2bb708c...

Fedora 41 : seamonkey (2025-135cf1b7f3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-135cf1b7f3 advisory. Fix bookmarks restoring from file. ---- Update to 2.53.20 Tenable has extracted the preceding description block directly from the Fedora security advisory...

PT-2025-5190 · WordPress · Solidres

Name of the Vulnerable Software and Affected Versions: Solidres – Hotel booking plugin versions 0.9.4 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, allowing SQL injection. This problem can be exploited to inject malicious SQL...

Fedora 40 : seamonkey (2025-4945eb6eeb)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-4945eb6eeb advisory. Fix bookmarks restoring from file. ---- Update to 2.53.20 Tenable has extracted the preceding description block directly from the Fedora security advisory...

git-lfs-3.6.1-1.1 on GA media (moderate)

git-lfs-3.6.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14649-1 Rating: moderate Cross-References: CVE-2024-53263 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the git-lfs-3.6.1-1.1...

CVE-2025-22146 Improper authentication on SAML SSO process allows user impersonation in sentry

Sentry is a developer-first error tracking and performance monitoring tool. A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via our private bug bounty program. The vulnerability allows an attacker to take over any user account by using a...