Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the unset ONONBLOCK flag, which could lead to blocking...

Indian Court Orders Action to Block Proton Mail Over AI Deepfake Abuse Allegations

A high court in the Indian state of Karnataka has ordered the blocking of end-to-end encrypted email provider Proton Mail across the country. The High Court of Karnataka, on April 29, said the ruling was in response to a legal complaint filed by M Moser Design Associated India Pvt Ltd in January...

The vulnerability of the Linux operating system’s kernel quota component, which allows a hacker to trigger a service failure

The vulnerability of the Linux kernel’s quota component is related to improper blocking of resources in the dquotwritebackdquots function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Xen hypervisors relates to the mutual blocking of execution streams, which allows a malicious actor to cause a service failure.

The vulnerability of Xen hypervisors is related to the mutual blocking of execution flows. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rtc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the rtc component in the Linux operating system’s kernel is related to improper blocking of resources in the rtctimerdowork function. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20250424-01

A vulnerability in the nftsetcommitupdate function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux kernel is related to the reuse of previously freed memory. of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability...

The vulnerability in the kernel module kcsan/debugfs.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the kernel/kcsan/debugfs.c module of the Linux operating system is related to insufficient blocking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the net/netfilter/xt_IDLETIMER.c module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the net/netfilter/xtIDLETIMER.c module in the Linux operating system is related to incorrect resource blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the stack_depot_save_flags() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the stackdepotsaveflags function in the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the i40e component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the i40e component in the Linux operating system’s kernel is related to incorrect blocking of resources in the i40evcgetVFResourcesmsg function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Linux operating system’s DRM/amdgpu kernel components, which allows a hacker to trigger a service failure

The vulnerability of DRM/AMDGPU cores in the Linux operating system is related to incorrect resource blocking. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of the ALSA kernel component in Linux operating systems, which allows a hacker to cause a service failure

The vulnerability of the ALSA kernel component in Linux operating systems is related to incorrect blocking of resources in the function sndus122ldisconnect. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the SCSI component in the Linux operating system is related to incorrect blocking of resources in the cqthreadv3hw function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sched_ext component of the pick_task_scx function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the schedext component in the picktaskscx function of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Linux operating system’s Bluetooth kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s Bluetooth kernel component is related to incorrect blocking of resources in the function rfcommsockioctl. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/driver/usb/musb/musb_gadget.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/usb/musb/musbgadget.c component of the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-21594

An Improper Check for Unusual or Exceptional Conditions vulnerability in the pfe packet forwarding engine of Juniper Networks Junos OS on MX Series causes a port within a pool to be blocked leading to Denial of Service DoS. In a DS-Lite Dual-Stack Lite and NAT Network Address Translation scenario...

CVE-2025-21594

Summary (CVE-2025-21594) : Affects Juniper Networks Junos OS on MX Series. The issue is an improper check in the packet forwarding engine (pfe) that can block a port pool when processing crafted IPv6 traffic in a DS-Lite/NAT scenario, causing Denial of Service. In the affected scenarios, ports as...

Don’t use corporate email for your personal life

TL;DR People use whatever is convenient. Segregation of work and personal matters is a key part of security. Using corporate addresses tramples on this separation. Corporate email addresses should be treated with the same care as sensitive corporate information. Create an Acceptable Use Policy th...

Vulnerability of the optee_supp_thrd_req() function (drivers/tee/optee/supp.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the opteesuppthrdreq function drivers/tee/optee/supp.c in the Linux kernel is related to incorrect blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...