6236 matches found
PT-2025-40100
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s genetlink functionality where the genl bind function could invoke a bind callback even after permission checks failed, potentially allowing callbacks ...
rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
...
Malicious code in callback-scorpius-planetology-wavefunction (npm)
The package callback-scorpius-planetology-wavefunction was found to contain malicious code...
Malicious code in callback-cybernetics-readable-eridanus (npm)
The package callback-cybernetics-readable-eridanus was found to contain malicious code...
Malicious code in hugo-stop-callback-bootstrap (npm)
The package hugo-stop-callback-bootstrap was found to contain malicious code...
MAL-2025-43688 Malicious code in callback-cybernetics-readable-eridanus (npm)
The package callback-cybernetics-readable-eridanus was found to contain malicious code...
MAL-2025-43689 Malicious code in callback-scorpius-planetology-wavefunction (npm)
The package callback-scorpius-planetology-wavefunction was found to contain malicious code...
MAL-2025-44646 Malicious code in hugo-stop-callback-bootstrap (npm)
The package hugo-stop-callback-bootstrap was found to contain malicious code...
MAL-2025-45177 Malicious code in mesosphere-foundation-callback-uranology (npm)
The package mesosphere-foundation-callback-uranology was found to contain malicious code...
MAL-2025-45181 Malicious code in meteor-dotenv-parse-variables-callback-kaus (npm)
The package meteor-dotenv-parse-variables-callback-kaus was found to contain malicious code...
AZL-66893 CVE-2025-38704 affecting package kernel for versions less than 6.6.130.1-3
In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer access In the preparation stage of CPU online, if the corresponding the rdp's-nocbcbkthread does not exist, will be created, there is a situation where the rdp's rcuop...
CVE-2025-38704
In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer access In the preparation stage of CPU online, if the corresponding the rdp's-nocbcbkthread does not exist, will be created, there is a situation where the rdp's rcuop...
CVE-2025-38704
CVE-2025-38704: In the Linux kernel, a bug in rcu/nocb could access an invalid nocb_cb_kthread pointer during CPU online/offline cycles. The fix changes the safety check to use rdp->nocb_gp_kthread instead of rdp_gp->nocb_gp_kthread. Public advisories from SUSE (SUSE-SU-2026:20220-1, openSU...
HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow
...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the RCU nocb not handling the kthread pointer correctly...
rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()
...
media: xc2028: avoid use-after-free in load_firmware_cb()
...
driver: iio: add missing checks on iio_info's callback access
...
CVE-2025-9219
CVE-2025-9219 affects Post SMTP – WP SMTP Plugin for WordPress. A missing capability check in the function update_post_smtp_pro_option_callback allows authenticated attackers with Subscriber-level access or higher to modify data and enable pro extensions. Affected versions are up to and including...
Use of Hard-coded Cryptographic Key
Overview Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key in the form of AuthSecretKey, StateSecretKey, and OAuthTokenSecretKey as defined in aes.go, which are used when generating the callback URL for OAuth authentication. Remediation Upgrade...