NVIDIA多款产品 安全漏洞

NVIDIA HGX GB200 and others are an acceleration platform for high-performance computing from NVIDIA. A security vulnerability exists in various NVIDIA products, which stems from a flaw in the HGX Management Controller that could lead to code execution, denial of service, elevation of privilege,...

PT-2025-38170

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s DRM/MSM/DP subsystem related to the lifetime management of auxiliary bus endpoint EP devices. Device-managed resources allocated after component...

SUSE CVE-2022-50247

In the Linux kernel, the following vulnerability has been resolved: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq Can not set the @sharedhcd to NULL before decrease the usage count by usbputhcd, this will cause the shared hcd not released...

SUSE CVE-2022-50339

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: avoid hcidevtestandsetflag in mgmtinithdev syzbot is again reporting attempt to cancel uninitialized work at mgmtindexremoved 1, for setting of HCIMGMT flag from mgmtinithdev from hcimgmtcmd from hcisocksendmsg can rac...

CVE-2025-44034

SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/Java/cn/gson/oasys/controller/address/AddrController...

CVE-2025-44034

SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/Java/cn/gson/oasys/controller/address/AddrController...

CVE-2023-53293

Removed by vendor...

CVE-2023-53293

CVE-2023-53293 has multiple feeds. The OSV entries describe a Linux kernel Bluetooth issue in the btrtl driver: the function btrtl_set_quirks() accessed btrtl_dev->ic_info->lmp_subver and could dereference NULL when a Realtek Bluetooth controller is used with an unsupported driver, risking ...

CVE-2023-53293

...

CVE-2023-53293 Bluetooth: btrtl: check for NULL in btrtl_set_quirks()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: check for NULL in btrtlsetquirks The btrtlsetquirks has accessed btrtldev-icinfo-lmpsubver since b8e482d02513. However, if installing a Realtek Bluetooth controller without the driver supported, it will hit the...

usb: dwc3: Remove WARN_ON for device endpoint command timeouts

...

CVE-2025-55834

A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logController.do component...

PT-2025-37983

Name of the Vulnerable Software and Affected Versions oa system oasys version 1.1 Description A SQL injection vulnerability exists in oa system oasys version 1.1. This allows a remote attacker to execute arbitrary code via the alph parameters in...

Linux Distros Unpatched Vulnerability : CVE-2023-53252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: use RCU for hciconnparams and iterate safely in hcisync hciupdateacceptlistsync...

PT-2025-38008

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw related to Bluetooth functionality. Specifically, a race condition can occur within the mgmt init hdev function due to the lack of serialization via hc...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling the old state CRTC, which could lead to a null pointer dereference...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2134)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/fpu: KVM: Set the base guest FPU uABI size to sizeofstruct kvmxsave.CVE-2022-49557 A cross-privilege Spectre v2 vulnerability allows attackers...

Linux Distros Unpatched Vulnerability : CVE-2022-50247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq Can not set the...

Linux Distros Unpatched Vulnerability : CVE-2022-50315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ata: ahci: Match EMMAXSLOTS with SATAPMPMAXPORTS UBSAN complains about array-index-out-of-bounds: 1.980703 kernel: UBSAN: array-index-out-of-bounds in...

Security Bulletin: NVIDIA DGX and HGX HMC and BMC - September 2025

NVIDIA has released a software update for NVIDIA® DGX and HGX HMC and BMC to address the security issues described below. To protect your system, download and install the latest update from the NVIDIA Developer Tools page. Go to NVIDIA Product Security. Details This section provides a summary of...