Vulnerability of the otx2_set_rxfh_context() function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2_ethtool.c file – Marvell Ethernet network adapter support driver for the Linux operating system. This vulnerability allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the otx2setrxfhcontext function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2ethtool.c module – Marvell Ethernet network adapter drivers for Linux operating systems are vulnerable due to buffer overflow exploits. Exploitation of this vulnerability could allow attackers t...

The vulnerability of the __ioremap_checkother() function in the arch/x86/mm/ioremap.c module on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ioremapcheckother function in the arch/x86/mm/ioremap.c module on the x86 kernel of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the icedebugfs_module_write() function in the drivers/net/ethernet/intel/ice/ice Debugfs.c driver of the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the icedebugfsmodulewrite function in the drivers/net/ethernet/intel/ice/icedebugfs.c file of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

Vulnerability of the sun8i_ss_prng_generate() function in the drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c module – a driver for the Linux operating system’s cryptographic acceleration engine, allowing a hacker to cause a service failure.

Vulnerability of the sun8issprngGenerate function in the drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c module – The driver for the Linux operating system’s cryptographic acceleration engine is vulnerable due to the absence of restrictions and controls on resource distribution. Exploiting this...

Vulnerability of the ib_uverbs_handler_5() function in the drivers/infiniband/core/uverbs_std_types_device.c module – This function in the Linux kernel’s InfiniBand support driver allows a hacker to cause a service failure.

Vulnerability of the ibuverbshandler5 function in the drivers/infiniband/core/uverbsstdtypesdevice.c module – The Linux kernel’s InfiniBand support driver has a vulnerability related to insufficient validation of input data when dividing by zero. Exploiting this vulnerability could allow an...

Vulnerability of the igb_clean_tx_ring() function in the drivers/net/ethernet/intel/igb/igb_main.c module – A driver for supporting Ethernet network adapters in Intel-based Linux operating systems, which allows a hacker to cause a service failure.

Vulnerability of the igbcleantxring function in the drivers/net/ethernet/intel/igb/igbmain.c module – The driver for supporting Intel Ethernet network adapters in the Linux operating system is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability can allow a...

Vulnerability of the ad7124_of_parse_channel_config() function in the drivers/iio/adc/ad7124.c module – A driver that supports various types of built-in sensors in the Linux operating system, which allows a hacker to cause service failures.

Vulnerability of the ad7124ofparsechannelconfig function in the drivers/iio/adc/ad7124.c module – The driver for supporting various types of built-in sensors in the Linux operating system involves copying buffers without checking the size of the input data a classic buffer overflow attack...

Vulnerability of the efx_nic_initinterrupt() function in the drivers/net/ethernet/sfc/nic.c module – A driver for supporting Ethernet network adapters in the Linux kernel, which allows a hacker to cause a service failure.

Vulnerability of the efxnicinitinterrupt function in the drivers/net/ethernet/sfc/nic.c module – The Linux kernel’s Ethernet network adapter support driver has a vulnerability where resources are not released after their useful life has ended. Exploiting this vulnerability could allow an attacker...

Vulnerability of the iscsi_prep_bidi_ahs() function in the drivers/scsi/libiscsi.c module – This driver supports SCSI devices in Linux operating systems. It can be exploited by attackers to cause service interruptions.

Vulnerability of the iscsiprepbidiahs function in the drivers/scsi/libiscsi.c module – The Linux system’s SCSI device driver framework involves the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the mlx5e_rep_neigh_update() function in the drivers/net/ethernet/mellanox/mlx5/core/en/rep/neigh.c module – A driver for supporting Mellanox Ethernet network adapters in the Linux operating system, which allows a hacker to cause a service failure

Vulnerability of the mlx5erepneighupdate function in the drivers/net/ethernet/mellanox/mlx5/core/en/rep/neigh.c module – The Mellanox Ethernet network adapter driver for the Linux operating system is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability cou...

Israel Says Iran Is Hacking Security Cameras for Spying

Plus: Ukrainian hackers reportedly knock out a key Russian internet provider, China’s Salt Typhoon hackers claim another victim, and the UK hits 23andMe with a hefty fine over its 2023 data breach...

The vulnerability of the NOOP command in the PCMan FTP server allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the NOOP command in the PCMan FTP server is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the SYSTEM FTP-server command of the PCMan FTP Server allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SYSTEM FTP-server command of the PCMan FTP Server lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the xmlBuildQName function in the Libxml2 library allows a attacker to trigger a service failure.

The vulnerability of the xmlBuildQName function in the Libxml2 library is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by loading a specially created web page...

The vulnerability of the httpGetEnv() function in TP-Link TL-WR940N router software allows a hacker to cause a service failure.

The vulnerability of the httpGetEnv function in TP-Link TL-WR940N router software lies in the fact that the operation is executed outside the buffer in memory when processing the dnsserver1 parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a...

The vulnerability of the SET command for the PCMan FTP Server allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SET command for the PCMan FTP Server is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the hci_cmd_sync_clear() function in the Linux operating system’s Bluetooth kernel implementation allows a intruder to cause a service failure.

The vulnerability of the hcicmdsyncclear function in the Linux operating system’s Bluetooth kernel implementation is related to the use of memory after it is freed due to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

TencentOS Server 3: subversion (TSSA-2022:0178)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0178 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2025-4418

An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...