127 matches found
CVE-2026-80208
APITable through 1.13.0-beta.1 annotates both getUserHistories and closePausedUserAccount in InternalUserController with requiredLogin = false. ResourceInterceptor honours that annotation by returning before any session or API key is validated, and the nginx gateway shipped with the product proxi...
CVE-2026-80208
APITable through 1.13.0-beta.1 ships two internal endpoints (/api/v1/internal/getUserHistories and /api/v1/internal/users/{userId}/close) annotated with requiredLogin = false. Because the product's nginx gateway proxies all /api requests to the backend and the ResourceInterceptor returns before v...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: hwmon: gpiofan Fix for out-of-bounds access to arrays The driver does not check whether the cooling state passed to gpiofansetcurstate exceeds the maximum cooling state stored in fandata-numspeeds. Since the cooling state is late...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: aoss: The refcount leak in qmpcoolingdevicesregister has been fixed. In every iteration of foreachavailablechildofnode, the reference count of the previous node is decremented. When exiting the...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: Thermal: Core – The putdevice function should only be called after deviceregister fails. putdevice should not be called before a previous call to deviceregister. thermalcoolingdeviceregister does not follow this principle...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/msm/gpu: Fixed a crash that occurs when the GPU is throttled immediately during boot. There is a small chance that the GPU might be already hot during boot. In that case, the call to ofdevfreqcoolingregister will immediately...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: thermal/core: A memory leak was fixed in thermalcoolingdeviceregister. I encountered a memory leak during the fault injection test. The unreferenced object is: 0xffff888010080000 size: 264312. The details of the memory leak are a...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: mlxsw: Thermal: Fix out-of-bounds memory accesses Currently, mlxsw allows cooling states to be set above the maximum cooling state supported by the driver: bash cat /sys/class/thermal/thermalzone2/cdev0/type mlxswfan cat...
SUSE CVE-2025-38093
In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: x1e80100: Add GPU cooling Unlike the CPU, the GPU does not throttle its speed automatically when it reaches high temperatures. With certain high GPU loads it is possible to reach the critical hardware shutdown...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004884)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004884 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix array out of bounds access The driver does not check if the cooling state...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993030)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993030 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix array out of bounds access The driver does not check if the cooling state...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993181)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993181 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: qcom: aoss: Fix refcount leak in qmpcoolingdevicesregister Every iteration of...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992300)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992300 advisory. In the Linux kernel, the following vulnerability has been resolved: soc: qcom: aoss: Fix refcount leak in qmpcoolingdevicesregister Every iteration of...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989301)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989301 advisory. In the Linux kernel, the following vulnerability has been resolved: mlxsw: thermal: Fix out-of-bounds memory accesses Currently, mlxsw allows cooling states to be se...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988872)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988872 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/core: Fix memory leak in thermalcoolingdeviceregister I got memory leak as follows when...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987027)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987027 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/core: Fix memory leak in thermalcoolingdeviceregister I got memory leak as follows when...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987221)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987221 advisory. In the Linux kernel, the following vulnerability has been resolved: mlxsw: thermal: Fix out-of-bounds memory accesses Currently, mlxsw allows cooling states to be se...
EUVD-2022-55227
Malicious code in bioql PyPI...