EulerOS Virtualization 2.13.0 : sed (EulerOS-SA-2026-3238)

According to the versions of the sed packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When sed is invoked with both -i in-place edit and --follow-symlinks, the function opennextfile performs two separate, non-atomic...

EulerOS Virtualization 2.13.0 : libtiff (EulerOS-SA-2026-3222)

According to the versions of the libtiff packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.CVE-2025-61144 Tenab...

EulerOS Virtualization 2.13.0 : openldap (EulerOS-SA-2026-3226)

According to the versions of the openldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : OpenLDAP Lightning Memory-Mapped Database LMDB versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffe...

The vulnerability of the environment.lookup() function in the child_process module of the json-data processing tool, JSONata, allows a attacker to execute arbitrary code.

The vulnerability of the environment.lookup function in the childprocess module of the json-data processing tool JSONata is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the `merge_sched_in()` function in the kernel/events/core.c module, which manages kernel events in Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the mergeschedin function in the kernel/events/core.c module, which manages kernel events in Linux operating systems, is related to the use of an unprotected alternative channel. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the qixis_cpld gpio_probe() function in the drivers/gpio/gpio-qixis-fpga.c driver module of the Linux operating system’s GPIO kernel allows a hacker to cause a service failure.

The vulnerability of the qixiscpld gpioprobe function in the drivers/gpio/gpio-qixis-fpga.c driver module of the Linux operating system’s GPIO driver is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the `dw_pcie_ep_raise_msixirq()` function in the `drivers/pci/controller/dwc/pcie-designware-ep.c` driver for Linux PCI-core devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dwpcieepraisemsixirq function in the drivers/pci/controller/dwc/pcie-designware-ep.c driver for Linux PCI-core devices is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the amdgpu_bo_create_list_entry_array() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c source file of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the amdgpubocreatelistentryarray function in the drivers/gpu/drm/amd/amdgpu/amdgpubolist.c source file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system leads to unmanageable resource consumption. Exploiting this vulnerability c...

The vulnerability of the sev_es_sync_vmsa() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to cause a service failure.

The vulnerability of the sevessyncvmsa function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the start_xmit() function in the drivers/net/virtio_net.c file of the Linux kernel network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the startxmit function in the drivers/net/virtionet.c file of the Linux kernel network device driver involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the bonddebug_rlb_hash_show() function in the drivers/net/bonding/bonddebugfs.c file of the Linux kernel-based network device driver allows a hacker to cause a system failure.

The vulnerability of the bonddebugrlbhashshow function in the drivers/net/bonding/bonddebugfs.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerabilities in the functions gserial_disconnect() and gserial_resume() of the driver module drivers/usb/gadget/function/u_serial.c of the Linux operating system’s USB device drivers allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions gserialdisconnect and gserialresume in the driver module drivers/usb/gadget/function/userial.c of the Linux operating system’s USB device drivers is related to the pointer reallocation due to concurrent access to resources race condition. Exploiting this...

The vulnerability of the exc3000_probe() function in the drivers/input/touchscreen/exc3000.c module of the Linux kernel touchscreen driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the exc3000probe function in the drivers/input/touchscreen/exc3000.c module of the Linux kernel touchscreen driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the poly1305_blocks_arch() function in the lib/crypto/arm64/poly1305-glue.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the poly1305blocksarch function in the lib/crypto/arm64/poly1305-glue.c module of the Linux operating system is related to an attempt to read inaccessible registers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ublk_partition_scan_work() function in the drivers/block/ublk_drv.c module of the Linux kernel’s block devices driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ublkpartitionscanwork function in the drivers/block/ublkdrv.c file of the Linux kernel’s block device driver relates to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an attacke...

The vulnerability of the cdc_ncm_check_tx_max() function in the drivers/net/usb/cdc_ncm.c module of the Linux kernel’s USB network adapter driver allows a hacker to cause a service failure.

The vulnerability of the cdcncmchecktxmax function in the drivers/net/usb/cdcncm.c module of the Linux network adapter driver framework is related to a violation of the data format agreement. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the bindertransaction() function of the drivers/android/binder.c module of the Linux kernel-based Android communication driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bindertransaction function in the drivers/android/binder.c module of the Linux kernel communication driver with the Android kernel involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the mtk_xdp_setup() function in the drivers/net/ethernet/mediatek/mtk_eth_soc.c file of the network adapter driver for mediatek’s Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mtkxdpsetup function in the drivers/net/ethernet/mediatek/mtkethsoc.c file of the network adapter driver for mediatek in the Linux operating system is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver relates to the possibility of modifying the contents of a publicly accessible static array. Exploiting this vulnerability could allow an attack...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to trigger a service failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause a system failure...