Linux kernel fs/fat/inode.c Heap Buffer Overflow DoS

The vulnerability of the sbminblocksize function in the fs/fat/inode.c module of the Linux kernel file system is related to the lack of checking of the returned value. Exploiting this vulnerability can allow a remote attacker to increase privileges or cause service failures...

CVE-2025-8872: Uncontrolled Resource Consumption

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

PT-2025-51781

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

Security Advisory 0128

Security Advisory 0128 PDF Date: December 16, 2025 Revision | Date | Changes ---|---|--- 1.0 | December 16, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-8872 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 6.5 / 10 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 7....

fs/nfs Component Data Compromise

The vulnerability of the fs/nfs component in Linux operating systems is related to the improper assignment of privileges. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Linux kernel driver Data Compromise

The vulnerability of the Linux operating system’s kernel driver component is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Linux kernel DoS

The vulnerability in the s390/char/sclp.c component of the Linux operating system’s kernel is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability allows an attacker to cause a service failure...

drm/xe Component Confidential Data Access DoS

The vulnerability of the drm/xe component in the Linux operating system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service interruptions...

stm32 kernel Component Confidential Data DoS

The vulnerability of the stm32 kernel component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

vdpa/mlx5 Component Data Compromise

The vulnerability of the vdpa/mlx5 component in the Linux operating system is related to the release of an incorrect pointer. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Linux Kernel Appletalk DoS

The vulnerability of the appletalk component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

Linux crypto kernel components Data Compromise

The vulnerability of Linux operating system’s crypto kernel components is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Linux ufs-exynos.c Component Confidential Data Access Data Compromise

The vulnerability of the ufs-exynos.c component in the Linux operating system is related to reading data from within acceptable limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Linux fs/hfs/bnode.c DoS

The vulnerability of the fs/hfs/bnode.c component in the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux xt_nfacct Netfilter Buffer Overflow DoS

The vulnerability of the net/netfilter/xtnfacct.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to access confidential data and also cause service interruptions...

MySQL Server DoS

The vulnerability of the MySQL Server database management system optimizer is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Performance Monitor DoS

The vulnerability of the Performance Monitor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

cstecgi.cgi Router Code Execution

The vulnerability of the cstecgi.cgi microprogramming software for TOTOLINK NR1800X and LR1200GB routers is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

MySQL InnoDB Data Access DoS

The vulnerability of the InnoDB component in the MySQL Database Management System is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to gain access to data or cause service failures...

MySQL Server DoS

The vulnerability of the MySQL Server component relates to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...