iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP

...

fsdax: dax_unshare_iter needs to copy entire blocks

...

net: sched: use RCU read-side critical section in taprio_dump()

...

ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()

...

CVE-2024-57513: Buffer Copy without Checking Size of Input

A floating-point exception FPE vulnerability exists in the AP4TfraAtom::AP4TfraAtom function in Bento4...

Cloudflare OctoRPKI security vulnerability

Cloudflare OctoRPKI is an RPKI toolkit for the Cloudflare platform from Cloudflare Inc. in the United States. A security vulnerability exists in Cloudflare OctoRPKI versions prior to v1.4.0, which stems from the use of the -a flag to 0 when copying files with rsync, which forces rsync to copy...

Linux kernel iwl_mvm_send_recovery_cmd DoS

The vulnerability of the iwlmvmsendrecoverycmd function in the drivers/net/wireless/intel/iwlwifi/mvm/fw.c module of the Linux kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Network Stack Module Code Execution

The vulnerability of the Network Stack module in Qualcomm’s embedded software lies in the copying of buffers without checking the size of the input data during the processing of IPA structures. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system failures...

CVE-2025-24131: Buffer Copy without Checking Size of Input

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3. An attacker on the local network may be able to cause a denial-of-service...

PT-2025-5317

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.3 Safari versions prior to 18.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description A privacy issue was addressed with improved handling of files. Copying a URL from Web Inspector may lead to...

Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059158 fixes several issues. The following security issues were fixed: CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv6...

OSV-2024-1423 Security exception in java.base/java.util.Arrays.copyOfRange

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=391709145 Crash type: Security exception Crash state: java.base/java.util.Arrays.copyOfRange org.apache.poi.util.IOUtils.safelyClone org.apache.poi.ddf.EscherMetafileBlip.fillFields...

PT-2025-51506

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm связана с копированием буфера без проверки размера входных данных. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

PT-2025-51556

Name of the Vulnerable Software and Affected Versions Qualcomm embedded platform firmware affected versions not specified Description A memory corruption issue exists when handling packets received from Unix clients. The firmware does not properly validate the size of incoming data during buffer...

Security Bulletin: Vulnerability in HSQLDB might affect IBM Storage Copy Data Management.

Summary IBM Storage Copy Data Management can be affected by vulnerability in HSQLDB. An attacker could exploit this vulnerability to execute arbitrary code on the system as described by the CVEs in the "Vulnerability Details" section. Vulnerability Details CVEID:CVE-2022-41853 DESCRIPTION: HSQLDB...

Security Bulletin: Vulnerability in OrientDB might affect IBM Storage Copy Data Management.

Summary IBM Storage Copy Data Management can be affected by a vulnerability in OrientDB. An attacker could exploit this vulnerability to execute arbitrary OS commands on the system as described by the CVEs in the "Vulnerability Details" section. Vulnerability Details CVEID:CVE-2017-11467...

Linksys E8450 Sub_422eb8 DoS

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data during the strcopy parameter processing. Exploiting this vulnerability can allow an attacker to cause service...

Medium: grpc

Issue Overview: There exists a denial of service through Data corruption in gRPC-C++ - gRPC-C++ servers with transmit zero copy enabled through the channel arg GRPCARGTCPTXZEROCOPYENABLED can experience data corruption issues. The data sent by the application may be corrupted before transmission...

Linksys E8450 Sub_422eb8 Code Execution

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogramming software is related to the copying of buffers without checking the size of the input data during the processing of the strncpy parameter. Exploiting this vulnerability allows an attacker to execute...

SUSE CVE-2024-57941

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the non-cancellation of copy when cache is temporarily disabled When the caching for a cookie is temporarily disabled e.g. due to a DIO write on that file, future copying to the cache for that file is disabled until al...