jfs: validate AG parameters in dbMount() to prevent crashes

...

x86/mm: Check return value from memblock_phys_alloc_range()

...

CVE-2025-8537

A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4DataBuffer::SetDataSize of the file Mp4Decrypt.cpp of the component mp4decrypt. The manipulation leads to allocation of resources. It is possible to launch the attack...

PT-2025-32320

Name of the Vulnerable Software and Affected Versions ExecuTorch versions prior to commit 0830af8207240df8d7f35b984cdf8bc35d74fa73 Description An integer overflow vulnerability exists in the loading of ExecuTorch models. This can lead to objects being placed outside of their allocated memory,...

Linux Distros Unpatched Vulnerability : CVE-2025-38215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: Fix doregisterframebuffer to prevent null-ptr-deref in fbvideomodetovar If fbaddvideomode in doregisterframebuffer fails to allocate memory for...

Linux Distros Unpatched Vulnerability : CVE-2024-36946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phonet: fix rtmphonetnotify skb allocation fillroute stores three components in the skb: - struct rtmsg - RTADST u8 - RTAOIF u32 Therefore, rtmphonetnotify shou...

Linux Distros Unpatched Vulnerability : CVE-2025-37960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: memblock: Accept allocated memory before use in memblockdoublearray When increasing the arra...

Linux Distros Unpatched Vulnerability : CVE-2023-52559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid memory allocation in iommususpend The iommususpend syscore suspend callbac...

Linux Distros Unpatched Vulnerability : CVE-2025-38426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Add basic validation for RAS header If RAS header read from EEPROM is corrupted, it could result in trying to allocate huge memory for reading the...

Linux Distros Unpatched Vulnerability : CVE-2025-37793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix null-ptr-deref in avscomponentprobe devmkasprintf returns NULL when...

Linux Distros Unpatched Vulnerability : CVE-2025-22016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: dpll: fix xaalloccyclic error handling In case of returning 1 from xaalloccyclic wrapping...

executorch 安全漏洞

executorch is an open source PyTorch deployment tool for PyTorch by pytorch. A security vulnerability exists in executorch that stems from an integer overflow that causes an object to be allocated to the wrong memory region, which could lead to the execution of arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2024-56695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfdgetcuoccupancy' The...

Linux Distros Unpatched Vulnerability : CVE-2024-46790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: codetag: debug: mark codetags for poisoned page as empty When PGhwpoison pages are freed the...

Linux Distros Unpatched Vulnerability : CVE-2025-38274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fpga: fix potential null pointer deref in fpgamgrtestimgloadsgt fpgamgrtestimgloadsgt...

PT-2025-32324

Name of the Vulnerable Software and Affected Versions ExecuTorch versions prior to commit 8f062d3f661e20bb19b24b767b9a9a46e8359f2b Description An integer overflow in the loading of ExecuTorch models can lead to the allocation of smaller-than-expected memory regions. This can potentially result in...

Linux Distros Unpatched Vulnerability : CVE-2022-50055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iavf: Fix adminq error handling iavfallocasqbufs/iavfallocarqbufs allocates with dmaalloccoherent memory for VF mailbox. Free DMA regions for both ASQ and ARQ i...

CVE-2025-47908

CVE-2025-47908 affects the Go middleware library github.com/rs/cors. Description in connected advisory confirms a DoS risk: processing malicious preflight requests with an Access-Control-Request-Headers header containing many commas triggers prohibitive heap allocations. Remediation provided by S...

CVE-2025-23331

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocation with excessive size value, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service...

CVE-2025-23331

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocation with excessive size value, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service...