421 matches found
SUSE CVE-2025-68209
In the Linux kernel, the following vulnerability has been resolved: mlx5: Fix default values in create CQ Currently, CQs without a completion function are assigned the mlx5addcqtotasklet function by default. This is problematic since only user CQs created through the mlx5ib driver are intended to...
AZL-72517 CVE-2025-68209 affecting package kernel 6.6.126.1-1
In the Linux kernel, the following vulnerability has been resolved: mlx5: Fix default values in create CQ Currently, CQs without a completion function are assigned the mlx5addcqtotasklet function by default. This is problematic since only user CQs created through the mlx5ib driver are intended to...
UBUNTU-CVE-2025-68209
In the Linux kernel, the following vulnerability has been resolved: mlx5: Fix default values in create CQ Currently, CQs without a completion function are assigned the mlx5addcqtotasklet function by default. This is problematic since only user CQs created through the mlx5ib driver are intended to...
CVE-2025-68209
CVE-2025-68209: Linux kernel mlx5 CQ creation defaults have been fixed. The patch adds defaults in the create CQ flow: a safe default dummy completion function to guard against null pointer exceptions for CQs without user-defined handlers, and an invalid default command sequence number for kernel...
CVE-2025-68209 mlx5: Fix default values in create CQ
In the Linux kernel, the following vulnerability has been resolved: mlx5: Fix default values in create CQ Currently, CQs without a completion function are assigned the mlx5addcqtotasklet function by default. This is problematic since only user CQs created through the mlx5ib driver are intended to...
PT-2025-51622
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the mlx5 driver related to the creation of completion queues CQs. Currently, CQs without a completion function are assigned the mlx5 add cq to tasklet...
SUSE CVE-2025-40340
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix oops in xegemfault when running corehotunplug test. I saw an oops in xegemfault when running the xe-fast-feedback testlist against the realtime kernel without debug options enabled. The panic happens after corehotunpl...
CVE-2025-40340 drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test.
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix oops in xegemfault when running corehotunplug test. I saw an oops in xegemfault when running the xe-fast-feedback testlist against the realtime kernel without debug options enabled. The panic happens after corehotunpl...
CVE-2025-14198
A vulnerability was detected in Verysync 微力同步 2.21.3. This affects an unknown function of the file /safebrowsing/clientreport/download?key=dummytoken of the component Web Administration Module. Performing manipulation results in information disclosure. The attack is possible to be carried out...
Django: User enumeration via timing attack in Django mod_wsgi authentication backend leads to account discovery
A vulnerability was discovered in the checkpassword function in django/contrib/auth/handlers/modwsgi.py. When a non-existent username was provided, the function returned immediately without performing password verification, leading to a timing attack that allowed attackers to enumerate valid...
runc: LSM labels can be bypassed with malicious config using dummy procfs files
...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989589)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989589 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: w83791d Fix NULL pointer dereference by removing unnecessary structure field If driver rea...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989360)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989360 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix handling of dummy receive descriptors Fix memory leak caused by not handling dummy...
ShuffleV: A Microarchitectural Defense Strategy against Electromagnetic Side-Channel Attacks in Microprocessors
The run-time electromagnetic EM emanation of microprocessors presents a side-channel that leaks the confidentiality of the applications running on them. Many recent works have demonstrated successful attacks leveraging such side-channels to extract the confidentiality of diverse applications, suc...
EUVD-2018-0401
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986833)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986833 advisory. In the Linux kernel, the following vulnerability has been resolved: hwmon: w83793 Fix NULL pointer dereference by removing unnecessary structure field If driver read...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986952)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986952 advisory. In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix underflow for the realdev refcnt Inject error before devholdrealdev in...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987147)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987147 advisory. In the Linux kernel, the following vulnerability has been resolved: iavf: Fix handling of dummy receive descriptors Fix memory leak caused by not handling dummy...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986274)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986274 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in atahostallocpinfo In an unlikely and probably wrong?...