Medium: ecs-init

Issue Overview: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result i...

Amazon Linux 2023 : cuda-libraries-12 (ALAS2023NVIDIA-2025-110)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-110 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : nvidia-gds-12 (ALAS2023NVIDIA-2025-074)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-074 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-nvprof-12 (ALAS2023NVIDIA-2025-102)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-102 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-profiler-api-12 (ALAS2023NVIDIA-2025-096)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-096 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Medium: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix memory leak in tpm2keyencode CVE-2024-36967 In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Do not use WARN when encode fails CVE-2024-36975 Affected Packages:...

Medium: cuda-compiler-12-9

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this...

Medium: cuda-cuxxfilt-12-9

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this...

Medium: cuda-12-9

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this...

Amazon Linux 2023 : cuda (ALAS2023NVIDIA-2025-090)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-090 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-nsight-systems-12 (ALAS2023NVIDIA-2025-105)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-105 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-minimal-build-12 (ALAS2023NVIDIA-2025-108)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-108 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : libcufft-12, libcufft-devel-12 (ALAS2023NVIDIA-2025-085)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-085 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-nvdisasm-12 (ALAS2023NVIDIA-2025-104)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-104 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : libnvjitlink-12, libnvjitlink-devel-12 (ALAS2023NVIDIA-2025-079)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-079 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-12 (ALAS2023NVIDIA-2025-123)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-123 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : cuda-sandbox-devel-12 (ALAS2023NVIDIA-2025-094)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-094 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Amazon Linux 2023 : nvidia, nvidia-fs (ALAS2023NVIDIA-2025-075)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-075 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...

Important: amazon-ssm-agent

Issue Overview: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted. CVE-2025-22869 Affected Packages:...

Amazon Linux 2023 : cuda-nvprune-12 (ALAS2023NVIDIA-2025-101)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2025-101 advisory. NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute...