CVE-2025-38066 dm cache: prevent BUG_ON by blocking retries on failed device resumes

In the Linux kernel, the following vulnerability has been resolved: dm cache: prevent BUGON by blocking retries on failed device resumes A cache device failing to resume due to mapping errors should not be retried, as the failure leaves a partially initialized policy object. Repeating the resume...

CVE-2023-53037 scsi: mpi3mr: Bad drive in topology results kernel crash

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer support is enabled and a device exposed to the OS by the driver fails INQUIRY commands, the driver frees up the memory allocated for an interna...

DEBIAN-CVE-2022-49874

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: fix possible memory leak in mousevscprobe If hidadddevice returns error, it should call hiddestroydevice to free hiddev which is allocated in hidallocatedevice...

Linux Distros Unpatched Vulnerability : CVE-2023-52784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bonding: stop the device in bondsetupbyslave Commit 9eed321cde22 net: lapbether: only support ethernet devices has been able to keep syzbot away from net/lapb,...

Schneider Electric ASCO 5310和ASCO 5350 代码问题漏洞

The Schneider Electric ASCO 5310 and Schneider Electric ASCO 5350 are both single-channel remote alarms from Schneider Electric France. A code issue vulnerability exists in the Schneider Electric ASCO 5310 and ASCO 5350 that stems from the inclusion of a dangerous type of file unrestricted upload...

TOTOLINK A3600R OS Command Injection Vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router manufactured by China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from an OS command injection vulnerability. The vulnerability originates in the /cgi-bin/cstecgi.cgi file stemming from improper handling of the ipDomain parameter. ...

kernel: RDMA/efa: Fix wrong resources deallocation order

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix wrong resources deallocation order When trying to destroy QP or CQ, we first decrease the refcount and potentially free memory regions allocated for the object and then request the device to destroy the object. If t...

PT-2025-54030

Name of the Vulnerable Software and Affected Versions linux affected versions not specified Description A flaw exists in the Linux kernel related to RDMA/efa resource deallocation. Specifically, the order of resource deallocation was incorrect, potentially leading to a refcount underflow when...

SOFTCREATE L2Blocker authentication error vulnerability

SOFTCREATE L2Blocker is a device type security system from SOFTCREATE Japan. It detects and blocks unauthorized connections from network devices to the internal network to prevent information leakage.An authentication error vulnerability exists in SOFTCREATE L2Blockeron-premise version 4.8.5 and...

SIEMENS SCALANCE X208 suffers from a Denial of Service Vulnerability

The SCALANCE X208 is a Siemens switch. A denial of service vulnerability exists in the SIEMENS SCALANCE X208, which can be exploited by an attacker to cause the device to fail to function properly...

Denial of Service Vulnerability in KGW3101 at Beijing Eastland Technology Co.

KGW3101 is a gateway product that realizes conversion between Modbus TCP and Modbus RTU/ASCII protocols. A denial of service vulnerability exists in the KGW3101 of Beijing Eastland Technology Co. Ltd. that can be exploited by attackers to cause the device to fail to function properly...

The vulnerability of Siemens CP’s communication module’s microprogramming software lies in the lack of authentication for the Telnet service. This allows attackers to obtain internal information or cause service failures.

The vulnerability of Siemens CP communication module’s microprogramming software is related to the absence of authentication for the Telnet service. Exploiting this vulnerability can allow a malicious actor to extract data or cause the device to fail...

The vulnerability of the microprogramming software used in Schneider Electric Modicon programmable logic controllers stems from incorrect processing of data in the incoming HTTP headers. This allows attackers to cause malfunctions in the device’s operation.

The vulnerability of the microprogrammed logic controllers from Schneider Electric Modicon stems from the improper elimination of CR and LF characters before data is entered into the incoming HTTP headers. Exploiting this vulnerability can allow an attacker to cause a device failure...

PVS Accelerator fails to cache and shows status: "Incompatible protocol version"

When PVS Target Devices that have been configured for PVS Accelerator caching boot, the XenServer PVS Accelerator fails to initialize the caching correctly. The caching status of the target will change from Stopped to Initialized and then eventually to"Incompatible Protocol version"...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerabilities of MediaTek components—M4U drivers, audio drivers, touchscreen drivers, GPU drivers, and Android operating system command queue drivers—are related to deficiencies in access control. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code, leading t...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerabilities of MediaTek components—M4U drivers, audio drivers, touchscreen drivers, GPU drivers, and Android operating system command queue drivers—are related to deficiencies in access control. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code, leading t...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerabilities of MediaTek components—M4U drivers, audio drivers, touchscreen drivers, GPU drivers, and Android operating system command queue drivers—are related to deficiencies in access control. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code, leading t...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerabilities of MediaTek components—M4U drivers, audio drivers, touchscreen drivers, GPU drivers, and Android operating system command queue drivers—are related to deficiencies in access control. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code, leading t...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerabilities of MediaTek components—including the M4U driver, audio drivers, touchscreen drivers, GPU drivers, and Android operating system Command Queue drivers—are related to deficiencies in access control. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerabilities of MediaTek components—M4U drivers, audio drivers, touchscreen drivers, GPU drivers, and Android operating system command queue drivers—are related to deficiencies in access control. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code, leading t...