6417 matches found
DEBIAN-CVE-2023-53567
In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a...
DEBIAN-CVE-2022-50496
In the Linux kernel, the following vulnerability has been resolved: dm cache: Fix UAF in destroy Dmcache also has the same UAF problem when dmresume and dmdestroy are concurrent. Therefore, cancelling timer again in destroy...
DEBIAN-CVE-2022-50476
In the Linux kernel, the following vulnerability has been resolved: ntbnetdev: Use devkfreeskbany in interrupt context TX/RX callback handlers ntbnetdevtxhandler, ntbnetdevrxhandler can be called in interrupt context via the DMA framework when the respective DMA operations have completed. As such...
UBUNTU-CVE-2023-53599
In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Fix missing initialisation affecting gcm-aes-s390 Fix afalgallocareq to initialise areq-firstrsgl.sgl.sgt.sgl to point to the scatterlist array in areq-firstrsgl.sgl.sgl. Without this, the gcm-aes-s390 driver will...
CVE-2023-53599 crypto: af_alg - Fix missing initialisation affecting gcm-aes-s390
In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Fix missing initialisation affecting gcm-aes-s390 Fix afalgallocareq to initialise areq-firstrsgl.sgl.sgt.sgl to point to the scatterlist array in areq-firstrsgl.sgl.sgl. Without this, the gcm-aes-s390 driver will...
CVE-2023-53599
CVE-2023-53599 concerns the Linux kernel crypto/af_alg path, specifically a missing initialisation in af_alg_alloc_areq() that caused gcm-aes-s390 to oops when req->dst was read and an empty ciphertext is passed. The issue made gcm_walk_start() operate on an uninitialised pointer (areq->fir...
RLSA-2025:9396 Important: mod_auth_openidc security update
The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: DoS via Empty POST in modauthopenidc with OIDCPreservePost Enabled...
RockyLinux 9 : mod_auth_openidc (RLSA-2025:9396)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9396 advisory. modauthopenidc: DoS via Empty POST in modauthopenidc with OIDCPreservePost Enabled CVE-2025-3891 Tenable has extracted the preceding description block directly fr...
EUVD-2023-47437
Malicious code in bioql PyPI...
EUVD-2025-25540
Malicious code in bioql PyPI...
EUVD-2023-55659
Malicious code in bioql PyPI...
EUVD-2023-43163
Malicious code in bioql PyPI...
EUVD-2024-36203
Malicious code in bioql PyPI...
EUVD-2022-29650
Malicious code in bioql PyPI...
EUVD-2025-4977
Malicious code in bioql PyPI...
EUVD-2024-3055
Malicious code in bioql PyPI...
EUVD-2022-30684
Malicious code in bioql PyPI...
EUVD-2024-53133
Malicious code in bioql PyPI...