CVE-2022-50446

In the Linux kernel, the following vulnerability has been resolved: ARC: mm: fix leakage of memory allocated for PTE Since commit d9820ff "ARC: mm: switch pgtablet back to struct page " a memory leakage problem occurs. Memory allocated for page table entries not released during process terminatio...

CVE-2022-50446 ARC: mm: fix leakage of memory allocated for PTE

In the Linux kernel, the following vulnerability has been resolved: ARC: mm: fix leakage of memory allocated for PTE Since commit d9820ff "ARC: mm: switch pgtablet back to struct page " a memory leakage problem occurs. Memory allocated for page table entries not released during process terminatio...

CVE-2022-50446

CVE-2022-50446 : In the Linux kernel, ARC CPUs are affected by a memory leak in page table entries (PTEs) due to the pmd_pgtable macro returning a direct virtual address after the pgtable_t switch back to struct page *. The leak occurs during process termination and can degrade available memory o...

CVE-2022-50446 ARC: mm: fix leakage of memory allocated for PTE

In the Linux kernel, the following vulnerability has been resolved: ARC: mm: fix leakage of memory allocated for PTE Since commit d9820ff "ARC: mm: switch pgtablet back to struct page " a memory leakage problem occurs. Memory allocated for page table entries not released during process terminatio...

PT-2025-40131

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.15-rc1 and later Description A memory leak exists in the Linux kernel related to page table entries PTEs. Following commit d9820ff, memory allocated for PTEs was not being released during process termination, leading to...

CVE-2025-55316

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2025-55316

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2025-55316

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2025-55316 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2025-55316

CVE-2025-55316 is an elevation-of-privilege vulnerability in Microsoft Azure Arc/Azure Connected Machine Agent. External control of a file name or path is the root cause, enabling an authorized local attacker to obtain higher privileges on the affected host. The CVE is reflected in multiple feeds...

September 9, 2025—KB5065509 (Monthly Rollup)

None None...

Azure Connected Machine Agent Elevation of Privilege Vulnerability

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

September 9, 2025—KB5065507 (Monthly Rollup)

None None...

PT-2025-36895

Name of the Vulnerable Software and Affected Versions: Azure Arc affected versions not specified Description: The software contains a flaw related to external control of file name or path. This allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is n...

Malicious code in hello-arc-windows (npm)

The package hello-arc-windows was found to contain malicious code...

Malicious code in hello-arc (npm)

The package hello-arc was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-44589 Malicious code in hello-arc-windows (npm)

The package hello-arc-windows was found to contain malicious code...

MAL-2025-44588 Malicious code in hello-arc (npm)

The package hello-arc was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2020-35711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with...

Linux Distros Unpatched Vulnerability : CVE-2015-9275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ARC 5.21q allows directory traversal via a full pathname in an archive file. CVE-2015-9275 Note that Nessus relies on the presence of the package as reported by...