2866 matches found
Gitlab -- Vulnerabilities
Gitlab reports: Denial of service via CI pipelines Unintentionally authorizing sensitive actions on users behalf IP Restriction Bypass through GraphQL Subscription Unauthorized users can list the number of confidential issues Debugging Information Disclosed...
DEBIAN-CVE-2025-21912
In the Linux kernel, the following vulnerability has been resolved: gpio: rcar: Use rawspinlock to protect register access Use rawspinlock in order to fix spurious messages about invalid context when spinlock debugging is enabled. The lock is only used to serialize register access. 4.239592...
UBUNTU-CVE-2025-21912
In the Linux kernel, the following vulnerability has been resolved: gpio: rcar: Use rawspinlock to protect register access Use rawspinlock in order to fix spurious messages about invalid context when spinlock debugging is enabled. The lock is only used to serialize register access. 4.239592...
CVE-2025-21912
CVE-2025-21912 describes a Linux kernel issue in the Renesas GPIO driver (gpio_rcar) where register access was not properly protected, leading to spurious “Invalid wait context” messages when spinlock debugging is enabled. The patch switches protection to a raw_spinlock to serialize register acce...
USN-7382-1 linux-oem-6.11 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...
USN-7382-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...
USN-7380-1 linux-lowlatency vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...
CVE-2022-49761
The Linux kernel contains a vulnerability in the btrfs filesystem component within the run_one_delayed_ref() function. The root cause involves a use-after-free condition where a @node could be freed by the caller while still being accessed for error reporting. To resolve this, the patch moves err...
CVE-2022-49761 btrfs: always report error in run_one_delayed_ref()
In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in runonedelayedref Currently we have a btrfsdebug for runonedelayedref failure, but if end users hit such problem, there will be no chance that btrfsdebug is enabled. This can lead to very little usefu...
CVE-2022-49761 btrfs: always report error in run_one_delayed_ref()
In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in runonedelayedref Currently we have a btrfsdebug for runonedelayedref failure, but if end users hit such problem, there will be no chance that btrfsdebug is enabled. This can lead to very little usefu...
CVE-2022-49761
In the Linux kernel, the following vulnerability has been resolved: btrfs: always report error in runonedelayedref Currently we have a btrfsdebug for runonedelayedref failure, but if end users hit such problem, there will be no chance that btrfsdebug is enabled. This can lead to very little usefu...
USN-7379-1 linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...
CVE-2025-29932
In JetBrains GoLand before 2025.1 an XXE during debugging was possible...
CVE-2025-29932
In JetBrains GoLand before 2025.1 an XXE during debugging was possible...
CVE-2025-29932
In JetBrains GoLand before 2025.1 an XXE during debugging was possible...
CVE-2025-29932
In JetBrains GoLand before 2025.1 an XXE during debugging was possible...
CVE-2025-29932
In JetBrains GoLand before 2025.1 an XXE during debugging was possible...
CVE-2025-29932
JetBrains GoLand prior to 2025.1 is affected by CVE-2025-29932: an XXE during debugging allows reading files via XML external entities. The vulnerability concerns the GoLand IDE (Go development) and is documented across multiple sources; no remediation details are provided in the supplied documen...
PT-2025-12800
Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2025.1 Description The issue concerns an XXE XML External Entity vulnerability that occurs during debugging. This allows for potential exploitation. No information is provided about the estimated number of...
