516770 matches found
SILK: Closing the Time-Of-Check-To-Time-Of-Use Gap in RoT-Protected AI Systems
Root-of-trust RoT authentication verifies a DNN model at load time, but weights may subsequently traverse DRAM, DMA, interconnect, and prefetch paths before reaching the compute engine. Post-verification tampering along this path can therefore alter the weights actually consumed while leaving the...
CVE-2025-51679
CVE-2025-51679 affects the openRISC OR1200 processor at commit 83ac6b , where a mismatch between the RTL (Register Transfer Level) and the netlist can lead to unexpected behavior . The CNA-assigned CVSS 3.1 score is 9.1 (CRITICAL) , with a network attack vector , low complexity , no privileges re...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104609)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104609 advisory. In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback errors cpuhpinvokecallback unwinds earlier callbacks...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098678)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098678 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 iwcm...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098796)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098796 advisory. In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmacrx function would previously s...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098941)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098941 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: ipgre: make ipgreheader robust Analog to commit db5b4e39c4e6 ip6gre: make ip6greheader robu...
Linux Distros Unpatched Vulnerability : CVE-2026-80571
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak In paprphyattestcreatehandle, the params-cmd.length is not validated before use, which can...
CentOS 9 : kernel-5.14.0-741.el9
"The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-741.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098780)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098780 advisory. In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bugon in jbd2journalgetcreateaccess when file system corrupted There's issue when fil...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098759)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098759 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer When advancing the...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098821)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098821 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: reserve enough transaction items for qgroup ioctls Currently our qgroup ioctls don't...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098762)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098762 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - zero initialize memory allocated via sockkmalloc Several crypto user API contexts...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098966)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098966 advisory. In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual devices in genpd If a device is attached to a PM...
The vulnerability of the SSHFS file system’s client’s find_base_path() function allows a hacker to execute arbitrary commands.
The vulnerability of the findbasepath function in the SSHFS file system lies in the ability to exploit or modify arguments. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...
The vulnerability of the `Response._make_location_absolute()` function in the `src/webob/response.py` file of the WebOb library, which is used for analyzing HTTP requests and generating HTTP responses. This vulnerability allows attackers to carry out phishing attacks.
The vulnerability of the Response.makelocationabsolute function in the src/webob/response.py file, a library for analyzing HTTP requests and generating HTTP responses in WebOb, is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a remote attacker t...
The vulnerability of the walk_pud_range() function in the mm/pagewalk.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.
The vulnerability of the walkpudrange function in the mm/pagewalk.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the gether_disconnect() function in the drivers/usb/gadget/function/u_ether.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.
The vulnerability of the getherdisconnect function in the drivers/usb/gadget/function/uether.c module of the Linux USB device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service...
The vulnerability of the ws.c file of the WebSocket server in the Libevent library allows a attacker to induce a service failure.
The vulnerability of the ws.c file of the WebSocket server in the Libevent library-related event notification asynchronous library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104553)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104553 advisory. In the Linux kernel, the following vulnerability has been resolved: dmearlycreate: fix freeing used table on dmresume failure If dmresume fails, the kernel attempts ...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098674)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098674 advisory. In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-fre...