The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the mask_cidr6() function in the tcprewrite tool for editing and replaying PCAP files allows a attacker to cause a service failure.

The vulnerability of the maskcidr6 function in the tcprewrite tool for editing and replaying PCAP files is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the ea_get() function in the JFS file system (fs/jfs/xattr.c) of Linux operating systems allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the eaget function in the JFS file system driver fs/jfs/xattr.c in Linux operating systems is related to incorrect handling of data read from a damaged file system. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cau...

The vulnerability of the read_hexstring() function in the tcprewrite editor for editing and replaying PCAP files, allows a hacker to cause a service failure.

The vulnerability of the readhexstring function in the tcprewrite tool for editing and replaying PCAP files involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the udmabuf_vm_fault() function in the udmabuf driver (drivers/dma-buf/udmabuf.c) in Linux kernel allows a attacker to compromise data integrity or cause service failures.

The vulnerability of the udmabufvmfault function in the udmabuf driver drivers/dma-buf/udmabuf.c in Linux operating systems is related to a flaw in the counting of the number of references to pages stored in memory. Exploiting this vulnerability can allow an attacker to compromise data integrity ...

The vulnerability of the mgmt_mesh_foreach() function in the net/bluetooth/mgmt_util.c module of operating systems running on Linux allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, or cause service failures.

The vulnerability of the mgmtmeshforeach function in the net/bluetooth/mgmtutil.c module of Linux operating systems is related to iterating over an inappropriate list called mgmtpending, which contains elements of type struct mgmtpendingCmd instead of struct mgmtmeshtx. Exploiting this...

Temporary File Retention

@fastify/multipart is vulnerable to Temporary File Retention. The vulnerability is due to the saveRequestFiles function failing to delete temporary uploaded files when a user cancels the request, allows an attacker to repeatedly initiate and cancel file uploads, leading to excessive disk space...

The vulnerabilities of the functions tcp_remove_empty_skb(), tcp_mark_push(), and min_t() in the net/ipv4/tcp.c module of Linux kernel allow a attacker to cause a service failure.

The vulnerabilities of the functions tcpremoveemptyskb, tcpmarkpush, and mint in the net/ipv4/tcp.c module of the Linux operating system’s kernel are related to improper control of resource identifiers. Exploiting these vulnerabilities could allow an attacker to cause service failures...

Vulnerability of components fs/ext4/inode.c and fs/ext4/super.c in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability in the fs/ext4/inode.c and fs/ext4/super.c components of the Linux operating system’s kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the `ksmbd_vfs_stream_read()` function in the KSMBD daemon of the Linux operating system allows a hacker to disclose protected information and cause service failures.

The vulnerability of the ksmbdvfsstreamread function in the KSMBD daemon of the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information and cause service failures by...

The vulnerability in the `fs/fuse/virtio_fs.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/fuse/virtiofs.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the i40e_client_subtask() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the i40eclientsubtask function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `tcp_set_default_congestion_control()` function in the Linux kernel’s `net/ipv4/tcp_cong.c` component allows a attacker to cause a service failure.

The vulnerability of the tcpsetdefaultcongestioncontrol function in the net/ipv4/tcpcong.c component of the Linux kernel leads to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the imgu_fmt() function in the drivers/staging/media/ipu3/ipu3-v4l2.c component of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the imgufmt function in the drivers/staging/media/ipu3/ipu3-v4l2.c component of the Linux kernel lies in improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

DeepSeek Faces Large-scale Cyberattack, Halts New User Registrations

DeepSeek, a new China-backed AI platform, faces a cyberattack disrupting new user registrations. Learn about its rapid growth,…...

The vulnerability of the microprogramming software of the Rockwell Automation PowerMonitor 1000 device, caused by buffer overflows, allows a hacker to trigger a maintenance failure.

The vulnerability of the microprogramming software of the Rockwell Automation PowerMonitor 1000 monitoring and control device is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

The vulnerability of the sub_422eb8() function in Linksys E8450 Wi-Fi router software allows a hacker to induce a service failure.

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogrammed software involves copying buffers without checking the size of the input data during the strcopy parameter processing. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases and the Server component: The Optimizer of the Oracle MySQL Server system, which allows a hacker to cause a service failure.

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases and the Server component of the Oracle MySQL Server management system are related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...