14768 matches found
CVE-2025-39923 dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bamdma: Fix DT error handling for num-channels/ees When we don't have a clock specified in the device tree, we have no way to ensure the BAM is on. This is often the case for remotely-controlled or remotely-power...
CVE-2025-39903 of_numa: fix uninitialized memory nodes causing kernel panic
In the Linux kernel, the following vulnerability has been resolved: ofnuma: fix uninitialized memory nodes causing kernel panic When there are memory-only nodes nodes without CPUs, these nodes are not properly initialized, causing kernel panic during boot. ofnumainit ofnumaparsecpunodes nodesetni...
CVE-2025-39903
The CVE-2025-39903 issue affects the Linux kernel and relates to NUMA memory initialization. The root cause was that memory-only NUMA nodes (nodes without CPUs) were not properly initialized, causing a NULL pointer dereference in free_area_init when NODE_DATA() is accessed for these uninitialized...
CVE-2025-39903 of_numa: fix uninitialized memory nodes causing kernel panic
In the Linux kernel, the following vulnerability has been resolved: ofnuma: fix uninitialized memory nodes causing kernel panic When there are memory-only nodes nodes without CPUs, these nodes are not properly initialized, causing kernel panic during boot. ofnumainit ofnumaparsecpunodes nodesetni...
Oracle Linux 10 : kernel (ELSA-2025-16904)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-16904 advisory. 6.12.0-55.37.1.0.1 - nvme-pci: remove two deallocate zeroes quirks Orabug: 37756650 - Add new Oracle Linux Driver Signing key 1 certificate Orabug:...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a lack of error handling and could lead to an early boot crash...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly booting a device when a queue is set to interrupt, which could cause the kernel to crash...
CVE-2025-39923: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bamdma: Fix DT error handling for num-channels/ees When we don't have a clock specified in the device tree, we have no way to ensure the BAM is on. This is often the case for remotely-controlled or remotely-power...
Debian dla-4320 : u-boot - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4320 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4320-1 [email protected]...
Debian: Security Advisory (DLA-4320-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 4320-1] u-boot security update
Debian LTS Advisory DLA-4320-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert October 01, 2025 https://wiki.debian.org/LTS Package : u-boot Version : 2021.01+dfsg-5+deb11u2 CVE ID : CVE-2021-27097 CVE-2021-27138 Debian Bug : 983269 983270 Multiple vulnerabilties...
This Week in Spring: September 30th, 2025
Hi, Spring fans! As I write this I am about to board a flight for Colorado for the amazing Dev2Next conference! I'll be in Antwerp, Beglium for the amazing Devoxx event next week, and I'll be speaking at the Amsterdam JUG with James Ward on the Thursday after that, too! If you're around, be sure ...
NewStart CGSL MAIN 6.06 : grub2 Multiple Vulnerabilities (NS-SA-2025-0221)
The remote NewStart CGSL host, running version MAIN 6.06, has grub2 packages installed that are affected by multiple vulnerabilities: - Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a...
cc.ddrpa.dorian.polystash:polystash-spring-boot-starter (>=1.0.0, <=1.0.1), cc.ddrpa.dorian:forvariz-spring-boot-starter (>=1.0.0, <=1.1.0) +859 more potentially affected by CVE-2025-59952 via io.minio:minio (>=8.0.0, <=8.5.17)
io.minio:minio MAVEN version =8.0.0, =1.0.0, =1.0.0, =1.0, =1.3.0.release, =1.0.0, =1.0.0, =1.0.0, =0.2.2, =11.0.1-release, =12.0.1-release and more Source cves: CVE-2025-59952 Source advisory: GHSA-H7RH-XFPJ-HPCM...
com.caiotte.framework:minio-spring-boot-starter (1.0.0), xyz.tneciv:minio-starter (2.0.2) potentially affected by CVE-2025-59952 via io.minio:minio (6.0.7)
io.minio:minio MAVEN version 6.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.minio:minio and may be impacted: - com.caiotte.framework:minio-spring-boot-starter 1.0.0 - xyz.tneciv:minio-starter 2.0.2 Source cves: CVE-2025-59952 Source advisory:...
Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4Shell CVE-2021-44228 PoC Objective Reproduce, explo...
kernel security update
4.18.0-553.77.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
September 29, 2025âKB5065789 (OS Builds 26200.6725 and 26100.6725) Preview
None None...
x86/efistub: Call mixed mode boot services on the firmware's stack
...
CicadasCMS code injection vulnerability
CicadasCMS is a content management framework based on SpringBoot Mybatis SpringSecurity Vue developed by westboy individual developers in China. A code injection vulnerability exists in CicadasCMS version 1.0, which originates from the incorrect operation of the parameter categoryName in the file...