CVE-2025-68773 spi: fsl-cpm: Check length parity before switching to 16 bit mode

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce "spi: fsl-cpm: Use 16 bit mode for large transfers with even size" failed to make sure that the size is really even before switching to 16 bit...

CVE-2025-68773

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce "spi: fsl-cpm: Use 16 bit mode for large transfers with even size" failed to make sure that the size is really even before switching to 16 bit...

CVE-2025-68773 spi: fsl-cpm: Check length parity before switching to 16 bit mode

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce "spi: fsl-cpm: Use 16 bit mode for large transfers with even size" failed to make sure that the size is really even before switching to 16 bit...

ROS-20260112-7382

A vulnerability in the mlx5ehandlerxcqempwrqshampo function of the Mellanox Ethernet network adapter driver in the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260112-7384

A vulnerability in the aspeedvideogetresolution function of the drivers/media/platform/aspeed/aspeed-video.c - multimedia device support driver module of the Linux operating system kernel is related to an operation exceeding buffer boundaries. Exploitation of the vulnerability may allow an intrud...

ROS-20260112-7379

A vulnerability in the dbDiscardAG function of the JFS file system of the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the formSetPPTPUserList() function in the Tenda AC23 router software allows a intruder to trigger a service failure.

The vulnerability of the formSetPPTPUserList function in the Tenda AC23 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the list parameter. Exploiting this vulnerability could allow a malicious actor to cause service...

CVE-2022-42261

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service...

CVE-2022-42262

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service...

CVE-2022-35928

AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version number 3.11 has a vulnerability with respect to reading user-provided passwords and confirmations via command-line prompts. Passwords lengths were not checke...

The vulnerability of the CNCSoft-G2 numerical control software lies in the execution of operations beyond the buffer limits in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the CNCSoft-G2 numerical control software lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2025-68753 ALSA: firewire-motu: add bounds check in put_user loop for DSP events

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in putuser loop for DSP events In the DSP event handling code, a putuser loop copies event data. When the user buffer size is not aligned to 4 bytes, it could overwrite beyond the buffer...

PT-2026-5018

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue relates to the context switch logic within Xen. Specifically, Xen attempts to skip an IBPB Instruction Barrier Page Base when a virtual CPU vCPU returns to a CPU it previously ran on...

PT-2026-7846

PostgreSQL and Affected Versions PostgreSQL versions prior to 18.3 PostgreSQL versions prior to 17.9 PostgreSQL versions prior to 16.13 PostgreSQL versions prior to 15.17 PostgreSQL versions prior to 14.22 PostgreSQL version 9.3 Description PostgreSQL is susceptible to a buffer overrun due to...

CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

The vulnerability of the `sess_get_uid()` function in D-Link DIR-600 router software allows a hacker to execute arbitrary code.

The vulnerability of the sessgetuid function in D-Link DIR-600 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP request...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992922)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992922 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2dumpomd value of ptr is increased by ciphkeylen inste...

The vulnerability of Tenda WH450 router microprogramming software, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of Tenda WH450 router microprogramming software is related to the execution of an operation beyond the buffer in memory when processing the parameter ssidindex for the destination point /goform/onSSIDChange. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client, related to writing beyond the buffer limit, allows attackers to execute arbitrary code.

The vulnerability of Mozilla Firefox browser and Thunderbird email client lies in the issue of buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the strcpy function in the microprogramming software for Tenda AC18 routers allows a hacker to execute arbitrary code or cause a service failure due to incorrect HTTP requests.

The vulnerability of the strcpy function in the microprogramming software for Tenda AC18 routers is related to the operation that goes beyond the buffer boundaries in memory when processing the mac argument. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause...