CVE-2025-39913

CVE-2025-39913 is a Linux kernel vulnerability related to tcp_bpf: when tcp_bpf_send_verdict() fails to allocate psock->cork, the code previously could proceed silently. The patch ensures sk_msg_free() is called if the cork allocation fails and that the copied count is set to 0, preventing cor...

CVE-2025-39911 i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path

In the Linux kernel, the following vulnerability has been resolved: i40e: fix IRQ freeing in i40evsirequestirqmsix error path If requestirq in i40evsirequestirqmsix fails in an iteration later than the first, the error path wants to free the IRQs requested so far. However, it uses the wrong devid...

CVE-2025-39897

CVE-2025-39897 (Linux kernel) : The issue, sourced from the Linux kernel patch notes, involves the Xilinx AXIENET driver where RX metadata pointer retrieval can fail when calling dmaengine_desc_get_metadata_ptr(), which may return an error pointer. The fix adds proper error checking and handling ...

CVE-2025-39897 net: xilinx: axienet: Add error handling for RX metadata pointer retrieval

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaenginedescgetmetadataptr which can return an error pointer and lead to potential crashes or undefined behaviour if the...

CVE-2025-39897 net: xilinx: axienet: Add error handling for RX metadata pointer retrieval

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaenginedescgetmetadataptr which can return an error pointer and lead to potential crashes or undefined behaviour if the...

CVE-2025-39897

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaenginedescgetmetadataptr which can return an error pointer and lead to potential crashes or undefined behaviour if the...

CVE-2025-39897 net: xilinx: axienet: Add error handling for RX metadata pointer retrieval

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaenginedescgetmetadataptr which can return an error pointer and lead to potential crashes or undefined behaviour if the...

ts3-manager 安全漏洞

ts3-manager is a web interface for maintaining the Teamspeak3 server by Jonathan Personal Developer. A security vulnerability exists in ts3-manager version 2.2.1 and earlier, which stems from a login page error handling mechanism that does not properly clean up malicious scripts embedded in the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly handling the ext4dirhash error, which could lead to system instability...

PT-2025-40156

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the dasd eckd init function within the s390/dasd module of the Linux kernel. The dasd reserve req structure is allocated before dasd vol info req, and...

PT-2025-40180

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was identified in the Linux kernel related to error handling within the ext4 dirhash function. Specifically, the function may fail when handling encrypted, casefolded file names...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from unfree memory in the error handling path, which could lead to a memory leak...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a lack of error handling and could lead to an early boot crash...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unreleased interrupt request in the error handling path, which could lead to a resource leak...

PT-2025-40151

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the load elf binary function within the Linux kernel's fs/binfmt elf component. This leak occurs when interp elf ex fails to allocate memory, leading to an...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly handling the EBUSY return value, which could lead to reuse after release...

PT-2025-40153

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3 Description The Linux kernel contains a flaw in the cros usbpd notify module where the cros usbpd notify init function does not validate the return value of platform driver register. This can lead to...

PT-2025-40307

Name of the Vulnerable Software and Affected Versions TS3 Manager versions prior to 2.2.2 Description TS3 Manager, a web interface for Teamspeak3 servers, contains a reflected cross-site scripting issue. The problem resides in the login page's error handling, specifically when processing server...

RHEL 8 : kernel (RHSA-2025:16919)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16919 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nfsd: don't ignore the return...

K000156687: Multiple ImageMagick vulnerabilities

Security Advisory Description CVE-2014-9818 ImageMagick allows remote attackers to cause a denial of service out-of-bounds access via a malformed sun file. CVE-2014-9819 Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a differe...