CVE-2022-49166

In the Linux kernel, the following vulnerability has been resolved: ntfs: add sanity check on allocation size ntfsreadinodemount invokes ntfsmallocnofs with zero allocation size. It triggers one BUG in the ntfsmalloc function. Fix this by adding sanity check on ni-attrlistsize...

Recommended update for Maven

This update for Maven fixes the following issues: maven-dependency-analyzer was updated from version 1.13.2 to 1.15.1: Key changes across versions: Bug fixes and improved support of dynamic types Dependency upgrades ASM, Maven core, and notably the removal of commons-io Improved error handling by...

products of the LLC Data Compromise

The vulnerability of the software products developed by LLC “NPO ‘MIR’ is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities could allow attackers who operate remotely to compromise the confidentiality, integrity, and accessibility of the...

CVE-2025-26598

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice searches for the pointer device based on its device ID and returns the matching value, or supposedly NULL, if no match was found. However, the code will return the last element of the list if no matching...

CVE-2025-26601

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger is called. If one of the changes triggers an error, the function will return...

GHSA-CRQM-PWHX-J97F vulnerabilities

Vulnerabilities for packages: mods, melange, authservice, victoriametrics-cluster-fips, gitness, age, flux-kustomize-controller, azcopy, cosign-fips, k8ssandra-operator, kubernetes-dns-node-cache, memcached-exporter, ytt, victoriametrics-operator, aws-efs-csi-driver-fips, vault-k8s,...

Medium: virtuoso-opensource

Issue Overview: An issue in the chasharray component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements. CVE-2024-57635 An issue in the itcsamplerowcheck component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a...

OSV-2025-162 Heap-buffer-overflow in snmp_in_options

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=398067543 Crash type: Heap-buffer-overflow READ 8 Crash state: snmpinoptions netsnmpparseargs snmpparseargsfuzzer.c...

Linux x86/mm kernel DoS

The vulnerability of x86/mm kernel components of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Linux kernel mlx5 DoS

The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux DRM MSM DPU DoS

The vulnerability of DRM/MSM/DPU components in Linux operating systems is related to memory leaks. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux DoS

The vulnerability of DRM/amdgpu/PM components in the Linux operating system is related to pointer aliasing. Exploiting this vulnerability can allow a hacker to trigger a service failure...

Linux kernel md/raid DoS

The vulnerability of Linux operating system’s md/raid kernel components is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Vulnerabilities fixed in IBM Cognos Controller

IBM has fixed vulnerabilities in IBM Cognos Controller Versions 11.0.0 to 11.0.1 FP3 and 11.1.0. The vulnerabilities allow a malicious person to perform attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Cross-Site-Scripting XSS. - Circumvention of a security...

mysql: Components Services unspecified vulnerability (CPU Jan 2025)

A flaw was found in the MySQL Server product of Oracle MySQL. This vulnerability allows a remote attacker to cause a denial of service DoS...

mysql: Components Services unspecified vulnerability (CPU Jan 2025)

A flaw was found in the MySQL Server product of Oracle MySQL. This vulnerability allows a remote attacker to cause a denial of service DoS...

Linux DRM AMD Display Kernel DoS

The vulnerability of the DRM/amd/display components in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux DRM/Nouveau Kernel Code Execution

The vulnerability of the DRM/Nouveau components of the Linux operating system is related to a significant loss of importance in the function nouveaugemprimeimportsgtable. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux DRM AMD Display Kernel DoS

The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux DRM/bridge DoS

The vulnerability of DRM/bridge components in the Linux operating system is related to the pointer to NULL. Exploiting this vulnerability can allow a hacker to trigger a service failure...