9105 matches found
SUSE CVE-2023-53026
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix ib block iterator counter overflow When registering a new DMA MR after selecting the best aligned page size for it, we iterate over the given sglist to split each entry to smaller, aligned to the selected page size...
CVE-2023-53002
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix a memory leak with reused mmapoffset drmvmanodeallow and drmvmanoderevoke should be called in balanced pairs. We call drmvmanodeallow once per-file everytime a user calls mmapoffset, but only call drmvmanoderevoke...
CVE-2023-52930
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential bit17 double-free A userspace with multiple threads racing I915GEMSETTILING to set the tiling to I915TILINGNONE could trigger a double free of the bit17 bitmask. Or conversely leak memory on the transition...
AZL-69491 CVE-2025-21872 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine its size Currently, when validating the mokvar table, we remap the entire table on each iteration of the loop, adding space as we discover new entries. If the table grows over a...
CVE-2025-21872
In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine its size Currently, when validating the mokvar table, we remap the entire table on each iteration of the loop, adding space as we discover new entries. If the table grows over a...
CVE-2025-21872 efi: Don't map the entire mokvar table to determine its size
In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine its size Currently, when validating the mokvar table, we remap the entire table on each iteration of the loop, adding space as we discover new entries. If the table grows over a...
CVE-2025-21872
CVE-2025-21872 – Linux kernel (EFI/MOKVAR handling) : The vulnerability arises from how the kernel validates the EFI MOKvar table. In older code, the mokvar table was fully remapped on each iteration to determine its size, which could fail if the table grew large due to early_memmap limitations, ...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-2783link is external Google Chromium Mojo Sandbox Escape Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from hugetlbchangeprotection not properly handling PTE flags...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling pte markers when forking...
CVE-2025-26011
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setUsernamePassword...
CVE-2025-2722
Last updated 25 March 2025...
CVE-2025-30558
Cross-Site Request Forgery CSRF vulnerability in EnzoCostantini55 ANAC XML Render anac-xml-render allows Stored XSS.This issue affects ANAC XML Render: from n/a through = 1.5.7...
VanHelsing RaaS Launch: 3 Victims, $5K Entry Fee, Multi-OS, and Double Extortion Tactics
A ransomware-as-a-service RaaS operation called VanHelsing has already claimed three victims since it launched on March 7, 2025, demanding ransoms as high as $500,000. "The RaaS model allows a wide range of participants, from experienced hackers to newcomers, to get involved with a $5,000 deposit...
PT-2025-16747
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the sja1105 table delete entry function. The issue involves an out-of-bounds warning due to two problems: deleting...
CVE-2025-2565
The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and Liferay DXP 2024.Q3.0, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92 allows an unauthorized user to obtain entry data...
CVE-2025-2482
creationtimestamp| type| source ---|---|--- 2025-03-22 07:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uzg3zk24 2025-03-22 10:22:25+00:00| seen| https://t.me/cvedetector/20855...
CVE-2025-2477
creationtimestamp| type| source ---|---|--- 2025-03-22 07:38:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uz3h5r2h 2025-03-22 10:22:32+00:00| seen| https://t.me/cvedetector/20861...
CVE-2025-2484
creationtimestamp| type| source ---|---|--- 2025-03-22 07:38:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uyqnpo2s 2025-03-22 10:22:25+00:00| seen| https://t.me/cvedetector/20856...
The vulnerability of the `struct buffer_head *ext4_findInline_entry()` function in the `fs/ext4/inline.c` module of the Linux operating system allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the struct bufferhead ext4findInlineentry function in the fs/ext4/inline.c module of the Linux operating system is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...