[ASA-202506-2] curl: denial of service

Arch Linux Security Advisory ASA-202506-2 ========================================= Severity: Low Date : 2025-06-05 CVE-ID : CVE-2025-5399 Package : curl Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-2895 Summary ======= The package curl before version 8.14.1-1 i...

[ASA-202505-12] go: directory traversal

Arch Linux Security Advisory ASA-202505-12 ========================================== Severity: Low Date : 2025-05-19 CVE-ID : CVE-2025-22873 Package : go Type : directory traversal Remote : No Link : https://security.archlinux.org/AVG-2878 Summary ======= The package go before version 2:1.24.3-1...

CVE-2025-23153 arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch()

In the Linux kernel, the following vulnerability has been resolved: arm/crc-t10dif: fix use of out-of-scope array in crct10difarch Fix a silly bug where an array was used outside of its scope...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of out-of-range arrays in the crct10difarch function...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of out-of-range arrays in the crct10difarch function...

SUSE CVE-2025-22049

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Increase ARCHDMAMINALIGN up to 16 ARCHDMAMINALIGN is 1 by default, but some LoongArch-specific devices such as APBDMA require 16 bytes alignment. When the data buffer length is too small, the hardware may make an error...

DEBIAN-CVE-2025-37893

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix off-by-one error in buildprologue Vincent reported that running BPF progs with tailcalls on LoongArch causes kernel hard lockup. Debugging the issues shows that the JITed image missing a jirl instruction at th...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an insufficient setting of ARCHDMAMINALIGN, which could result in a hardware write error...

Important: kernel-livepatch-5.10.234-225.921

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nfsd: clear aclaccess/acldefault after releasing them CVE-2025-21796 Affected Packages: kernel-livepatch-5.10.234-225.921 Issue Correction: Please ensure you have live patching enabled. Run yum update...

The vulnerability of the fpmr_set() function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support in the Linux operating system. This vulnerability allows an attacker to gain access to protected information or cause a service failure.

The vulnerability of the fpmrset function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support in the Linux operating system, involves a memory leak. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the poe_set() function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support in the Linux operating system, allows a attacker to gain access to protected information or cause service interruptions.

The vulnerability of the poeset function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, relates to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to access protected information or...

The vulnerability of the show_cpuinfo() function in the arch/sh/kernel/cpu/proc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the showcpuinfo function in the arch/sh/kernel/cpu/proc.c module of the Linux operating system is related to the use of a name with incorrect references. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the kvm_pv_send_ipi() function in the arch/x86/include/asm/kvm_host.h module on the Linux operating system’s x86 kernel platform allows a attacker to cause a service failure.

The vulnerability of the kvmpvsendipi function in the arch/x86/include/asm/kvmhost.h module on the Linux operating system’s x86 kernel platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the startup_kernel() function in the arch/s390/boot/startup.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the startupkernel function in the arch/s390/boot/startup.c module of the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-55005

Уязвимость функции build prologue модуля arch/loongarch/net/bpf jit.c поддержки архитектуры LoongArch ядра операционной системы Linux связана с ошибкой единичного смещения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-55054

Уязвимость функции build insn модуля arch/loongarch/net/bpf jit.c поддержки архитектуры LoongArch ядра операционной системы Linux связана с отсутствием проверки возвращаемого значения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-16689

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the LoongArch architecture, where the default value of ARCH DMA MINALIGN is 1, but some devices require 16...

CVE-2023-52978 riscv: kprobe: Fixup kernel panic when probing an illegal position

In the Linux kernel, the following vulnerability has been resolved: riscv: kprobe: Fixup kernel panic when probing an illegal position The kernel would panic when probed for an illegal position. eg: CONFIGRISCVISAC=n echo 'p:hello kernelclone+0x16 a0=%a0' kprobeevents echo 1...

PT-2025-13336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to an invalid out of bounds read warning generated by GCC 11.1.0 and 11.2.0 when compiling the kernel. The issue arises fro...

PT-2025-18406

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel has been resolved, specifically an issue where an array was used outside of its scope in the crc t10dif arch function. This bug has been fixed. Recommendations ...