CVE-2022-50297

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: verify the expected usbendpoints are present The bug arises when a USB device claims to be an ATH9K but doesn't have the expected endpoints. In this case there was an interrupt endpoint where the driver expected a bu...

CVE-2022-50248

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double free on tx path. We see kernel crashes and lockups and KASAN errors related to ax210 firmware crashes. One of the KASAN dumps pointed at the tx path, and it appears there is indeed a way to...

CVE-2022-50248

CVE-2022-50248 is a Linux kernel vulnerability affecting the iwlwifi/iwl mvm TX path where a double-free of skb can occur. The issue arises when iwl_mvm_tx_skb_sta returns non-zero and the skb is freed, but a TSO skb buffer may also be freed in an error path; the fix is to return 0 in that error ...

PT-2025-37590

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the qlcnic driver where a use-after-free condition can occur during DCB Data Center Bridging operations. Specifically, the adapter-dcb pointer could...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly cleaning the stagedconfig temporary storage in rdtdomain, which could lead to MSR access errors...

PT-2025-37634

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.0.3 Description A flaw exists in the Linux kernel related to the handling of PCI devices and simple framebuffer devices. Specifically, the sysfb disable function was not being called before removing PCI devices, leading...

Linux Distros Unpatched Vulnerability : CVE-2025-39763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered If a synchronous error is detected as a result of user-space process triggerin...

CVE-2025-58144

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a restriction on writing BIOs to partitioned devices that is not handled correctly, which could result in a...

AZL-67217 CVE-2025-39763 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered If a synchronous error is detected as a result of user-space process triggering a 2-bit uncorrected error, the CPU will take a synchronous error...

SUSE-SU-2025:20696-1 Security update for vim

This update for vim fixes the following issues: - CVE-2025-53906: Fixed malicious zip archive causing path traversal bsc1246602 - CVE-2025-53905: Fixed malicious tar archive causing path traversal bsc1246604 - CVE-2025-55157: Fixed use-after-free in internal tuple reference management bsc1247938 ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle synchronization memory errors, which could result in a system reboot or a hard...

SUSE-SU-2025:03152-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels bsc1248076. - CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces bsc1248077. -...

Linux Distros Unpatched Vulnerability : CVE-2020-13649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scannerreverseinfolist NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2022-20499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no...

CVE-2025-58442 Saleor has user enumeration vulnerability due to different error messages

Saleor is an e-commerce platform. Starting in version 3.21.0 and prior to version 3.21.16, requesting certain fields in the response of accountRegister may result in errors that could unintentionally reveal whether a user with the provided email already exists in Saleor. Version 3.21.16 fixes the...

Google Android Information Disclosure Vulnerability (CNVD-2025-24499)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a letter disclosure vulnerability, which is caused by a logic error in multiple locations. An attacker can exploit the vulnerability to potentially cause a local information leak...

Google Android elevation of privilege vulnerability (CNVD-2025-23046)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that is caused by background activity that may be initiated as a result of logic errors in multiple functions of LocationProviderManager.java. An attacker...

The vulnerability of the Go programming language, related to synchronization errors when using a shared resource, allows attackers to cause service failures.

The vulnerability of the Go programming language is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the phpseclib cryptographic protocol library, related to errors in verifying the cryptographic signature, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the phpseclib cryptographic protocol library is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...