Amazon Linux 2023 : cuda-sandbox-devel-12 (ALAS2023NVIDIA-2025-094)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-094 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : nvidia, nvidia-fs (ALAS2023NVIDIA-2025-075)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-075 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Important: python-setuptools

Issue Overview: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the...

Medium: libcufft-12-9

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this...

Medium: cuda-nvcc-12-9

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this...

Amazon Linux 2023 : cuda-cudart-12, cuda-cudart-devel-12, cuda-driver-devel-12 (ALAS2023NVIDIA-2025-117)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-117 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-nsight-12 (ALAS2023NVIDIA-2025-107)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-107 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : libcurand-12, libcurand-devel-12 (ALAS2023NVIDIA-2025-084)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-084 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-toolkit-12 (ALAS2023NVIDIA-2025-091)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-091 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-cupti-12 (ALAS2023NVIDIA-2025-115)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-115 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : nvidia (ALAS2023NVIDIA-2025-073)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-073 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-nvml-devel-12 (ALAS2023NVIDIA-2025-103)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-103 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-command-line-tools-12 (ALAS2023NVIDIA-2025-120)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-120 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cowfilerange failed CVE-2024-57976 In the Linux kernel, the following vulnerability has been resolved: kernel: be more careful about dupmmap failures and uprobe registering...

Important: kernel-livepatch-6.1.131-143.221

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvmetcprecvpdu CVE-2025-21927 In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir CVE-2025-37785 Affected...

Important: kernel-livepatch-6.12.20-23.97

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir CVE-2025-37785 Affected Packages: kernel-livepatch-6.12.20-23.97 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Important: glibc

Issue Overview: Untrusted LDLIBRARYPATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen including internal dlopen calls after setlocale or calls to...

Medium: git

Issue Overview: Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed...

Amazon Linux 2023 : cuda-cccl-12 (ALAS2023NVIDIA-2025-121)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-121 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : libcusolver-12, libcusolver-devel-12 (ALAS2023NVIDIA-2025-083)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-083 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...