PT-2025-25828

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was related to the debugfs summary output accessing uninitialized elements in the freq in and signal out arrays, causing...

CVE-2025-1975: Improper Validation of Array Index

A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service DoS attack by customizing the manifest content and spoofing a service. This is due to improper validation of array index access when downloading a model via the /api/pull endpoint, which can...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()

A potential array-index-out-of-bounds read flaw was found in the Linux kernel in ath9khtctxstatus. This issue may lead to a crash...

Alibaba Cloud Linux 3 : 0016: sqlite (ALINUX3-SA-2023:0016)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0016 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-35737: SQLite 1.0.12 through 3.39.x before...

Qualcomm security Heap Buffer Overflow

The vulnerability of Qualcomm’s security microprogramming software relates to unverified array indexing. Exploiting this vulnerability could allow attackers to influence the integrity, accessibility, and confidentiality of the protected information...

Qualcomm Embedded Software Array Indexing

The vulnerability of microprogramming software in embedded Qualcomm chips is related to unverified array indexing. Exploiting this vulnerability can allow attackers to influence the integrity, accessibility, and confidentiality of the protected information...

Qualcomm Embedded Software Array Indexing

The vulnerability of microprogramming software in embedded Qualcomm chips is related to unverified array indexing. Exploiting this vulnerability can allow attackers to influence the integrity, accessibility, and confidentiality of the protected information...

Qualcomm Embedded Software Array Indexing

The vulnerability of microprogramming software in embedded Qualcomm chips is related to unverified array indexing. Exploiting this vulnerability can allow attackers to influence the integrity, accessibility, and confidentiality of the protected information...

ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling

A flaw was found in Artifex Ghostscript's PDF XRef stream handling. This vulnerability allows a buffer overflow via crafted values in the W array of a PDF XRef stream...

ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling

A flaw was found in Artifex Ghostscript's PDF XRef stream handling. This vulnerability allows a buffer overflow via crafted values in the W array of a PDF XRef stream...

kernel: usb: typec: fix potential array underflow in ucsi_ccg_sync_control()

A flaw was found in the Linux kernel's USB Type-C driver. A local user with administrative privileges can exploit this flaw by providing a crafted command through the debug file system debugfs. This issue results in an array underflow and out-of-bounds memory access, which may lead to a system...

kernel: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()

A flaw was found in the Linux kernel's ath9k wireless driver. A local user can exploit missing range validation of the endpoint identifier during device communication, leading to an out-of-bounds array access. This vulnerability can lead to a Denial of Service DoS by crashing the kernel and may...

kernel: udmabuf: change folios array from kmalloc to kvmalloc

A flaw was found in the Linux kernel's udmabuf driver. This vulnerability allows a local user to cause a denial of service DoS by requesting large buffer allocations. Because the driver relies on physically contiguous memory allocations with strict size limits, requesting buffers that exceed kern...

kernel: fs: prevent out-of-bounds array speculation when closing a file descriptor

In the Linux kernel, the following vulnerability has been resolved: fs: prevent out-of-bounds array speculation when closing a file descriptor Google-Bug-Id: 114199369...

kernel: protect the fetch of ->fd[fd] in do_dup2() from mispredictions

A flaw was found in the Linux kernel. The file descriptor duplication mechanism in the dodup2 function does not sanitize array indexing against speculative execution. A local user can exploit this flaw through processor branch mispredictions to trigger speculative out-of-bounds memory reads,...

kernel: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number

A flaw was found in the drm/amdgpu component of the Linux kernel. An improper range check of the fbchannelnumber could allow a local attacker to perform an out-of-bounds read. This could lead to information disclosure or a denial of service DoS...

kernel: gpio: prevent potential speculation leaks in gpio_device_get_desc()

A flaw was found in the Linux kernel's General Purpose Input/Output GPIO subsystem. A local user can exploit this vulnerability by providing an out-of-range offset to the gpioioctl function. This can lead to a speculative read of memory outside the intended GPIO descriptor array, potentially...

kernel: drm/amd/display: Increase array size of dummy_boolean

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability occurs because the dml2coresharedmodesupport and dmlcoremodesupport functions attempt to access an array element beyond its allocated size. A local attacker could potentially exploit this out-of-bounds write,...

kernel: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. A local attacker could exploit a field-spanning write vulnerability within the mwifiexcmd80211scanext function. This issue could lead to a system crash, resulting in a Denial of Service DoS...