PT-2025-38573

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.56-gb4403bd46a8e 1 Description The Linux kernel contains a use-after-free issue in the mark inode dirty function related to file system writeback. This occurs when the function accesses a block device writeba...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ksmbd not verifying that numsubauth is zero...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: block, bfq: don't move oombfqq CVE-2022-49179 In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for realdev CVE-2022-49390 In the Linux kernel, the following vulnerability has...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: block, bfq: don't move oombfqq CVE-2022-49179 In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for realdev CVE-2022-49390 In the Linux kernel, the following vulnerability has...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a corrupted exfatgetblock function stack...

PT-2025-22239

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the block integrity functionality in the Linux kernel. Placing multiple protection information buffers inside the same page can cause errors because set page dirt...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an imbalance in the reference count of the smb client netns, which could lead to a memory leak and reuse aft...

CVE-2025-32103

CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames, bypassing SecurityManager restrictions...

CVE-2025-2083: Improper Neutralization of Input During Web Page Generation

The Logo Carousel Gutenberg Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sliderId’ parameter in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress plugin Logo Carousel Gutenberg Block 跨站脚本漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed in the PHP language, which supports personal blogs on PHP and MySQL servers, and the WordPress plugin is an application plugin...

PT-2025-16310

Name of the Vulnerable Software and Affected Versions Logo Carousel Gutenberg Block plugin for WordPress versions up to and including 2.1.6 Description The issue is related to insufficient input sanitization and output escaping, allowing authenticated attackers with Contributor-level access or...

The vulnerability of the cifs_strndup_from_utf16() function in the /fs/smb/client/reparse.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cifsstrndupfromutf16 function in the /fs/smb/client/reparse.c module of the Linux kernel involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2025-22241

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak issue in the Linux kernel has been identified. The problem occurs when registering a queue fails after a successful blk mq sysfs register call, but an error is encountere...

The vulnerability of the disk_register_independent_access_ranges() function in the block/blk-ia-ranges.c module, which is part of the Linux kernel’s block-level support, allows a attacker to cause a service failure.

The vulnerability of the diskregisterindependentaccessranges function in the block/blk-ia-ranges.c module, which supports the block-level kernel in the Linux operating system, relates to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could...

Vulnerability of the aoeblk_gdalloc() function in the drivers/block/aoe/aoeblk.c module – This driver provides support for block devices in the Linux kernel, which can be exploited by attackers to cause service failures.

Vulnerability of the aoeblkgdalloc function in the drivers/block/aoe/aoeblk.c module – The Linux kernel’s block device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `parse_server_interfaces()` function in the `fs/smb/client/smb2ops.c` module allows a hacker to compromise the integrity of protected information or cause service failures for the SMB kernel client of the Linux operating system.

The vulnerability of the parseserverinterfaces function in the fs/smb/client/smb2ops.c module, which is part of the SMB client support in Linux operating systems, involves a numerical port escape or cyclic shift vulnerability. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the bfq_setup_merge() function in the block/bfq-iosched.c module exposes the block-level kernel support of the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bfqsetupmerge function in the block/bfq-iosched.c module related to Linux kernel’s block-level support involves the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the smb2_send_interim_resp() function in the fs/ksmbd/smb2pdu.c module of the Linux file system support module allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the smb2sendinterimresp function in the fs/ksmbd/smb2pdu.c module of the Linux file system support module is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information or cause service...

The vulnerability of the smb component in the Linux operating system’s kernel allows a hacker to increase their privileges.

The vulnerability of the smb component in the Linux operating system’s kernel relates to the use of memory after it is freed in the SMB2negotiate function. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2025-3276: Improper Neutralization of Input During Web Page Generation

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Carousel block in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...