Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Treat the remaining value being equal to 0 as an error in findandmapuserpages. Currently, if findandmapuserpages receives a DMA transfer request from the user with a length field set to 0, or in a rare case, when the...

CVE-2025-40172

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Treat remaining == 0 as error in findandmapuserpages Currently, if findandmapuserpages takes a DMA xfer request from the user with a length field set to 0, or in a rare case, the host receives QAICTRANSDMAXFERCONT fro...

EUVD-2025-124911

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Treat remaining == 0 as error in findandmapuserpages Currently, if findandmapuserpages takes a DMA xfer request from the user with a length field set to 0, or in a rare case, the host receives QAICTRANSDMAXFERCONT fro...

CVE-2025-40172

CVE-2025-40172 is connected to the Linux kernel’s QAIC driver (drivers/accel/qaic/qaic_control.c). The issue arises in find_and_map_user_pages(): when a DMA transfer request from user space has a length of 0, or in a rare case the host/device signals QAIC_TRANS_DMA_XFER_CONT with resources->xf...

CVE-2025-40172 accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Treat remaining == 0 as error in findandmapuserpages Currently, if findandmapuserpages takes a DMA xfer request from the user with a length field set to 0, or in a rare case, the host receives QAICTRANSDMAXFERCONT fro...

swiss-alp-health.ch Improper Access Control vulnerability OBB-3860480

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

wireshark:fuzzshark_ip_proto-udp: Heap-buffer-overflow in dissect_alp

Project: https://code.wireshark.org/review/wireshark https://gitlab.com/wireshark/wireshark.git Detailed Report: https://oss-fuzz.com/testcase?key=5130523108573184 Project: wireshark Fuzzing Engine: afl Fuzz Target: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type:...

tegia-alp-plaun.ch Cross Site Scripting vulnerability OBB-2298552

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

alp-bayern.de Improper Access Control vulnerability OBB-2232377

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2020-10157

Name of the Vulnerable Software and Affected Versions Huawei smart phones versions earlier than 8.0.0.168 Huawei smart phones versions earlier than 9.0.0.177 Huawei smart phones versions earlier than 9.0.0.181 Huawei smart phones versions earlier than 9.0.0.201 Huawei smart phones versions earlie...

Huawei Data Communication: SegmentSmack Vulnerability in Linux Kernel (huawei-sa-20181031-02-linux)

There is a DoS vulnerability in the Linux Kernel versions 4.9+ and supported versions known as a SegmentSmack attack. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

alp-bnb.ch Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1126310 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting alp-bnb.ch website and it...

PT-2019-4371

Name of the Vulnerable Software and Affected Versions Huawei Mate 20 versions earlier than 9.1.0.131C00E131R3P1 Huawei Mate 20 Pro versions earlier than 9.1.0.310C185E10R2P1 Huawei Mate 20 RS versions earlier than 9.1.0.135C786E133R3P1 Huawei Mate 20 X versions earlier than 9.1.0.135C00E133R2P1...

Microsoft Windows Multiple Vulnerabilities (KB4512501)

This host is missing a critical security update according to Microsoft KB4512501 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2018-7910

CVE-2018-7910 applies to several Huawei smartphones (e.g., ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C) running Android 8.x with builds such as 8.0.0.118D(C00/ C01), 8.0.0.127/128/137(C432). The flaw is an authentication bypass that lets an attacker replace the boot/startup program when t...

PT-2018-18320

Name of the Vulnerable Software and Affected Versions: Huawei ALP-AL00B versions 8.0.0.106C00 through 8.0.0.129SP2C01 Huawei BLA-TL00B versions 8.0.0.113SP7C01 through 8.0.0.129SP2C01 Huawei Charlotte-AL00A versions 8.1.0.105SP7C00 through 8.1.0.109SP5C00 Huawei Emily-AL00A versions 8.1.0.105SP6C...

CVE-2018-7991

Huawei smartphones Mate10 with versions earlier before ALP-AL00B 8.0.0.110C00 have a Factory Reset Protection FRP bypass vulnerability. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to the computer and then perform some specific...

CVE-2018-7923

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150C432 have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to...

CVE-2018-7923

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150C432 have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to...

CVE-2018-7922

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150C432 have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to...