11934 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-39726
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/ism: fix concurrency management in ismcmd The s390x ISM device data sheet clearly states that only one request-response sequence is allowable per ISM...
CVE-2025-39726
CVE-2025-39726 concerns the s390 Linux kernel ISM driver. The connected BDU entry notes that vulnerabilities in the functions ism_cmd() and ism_probe() in drivers/s390/net/ism_drv.c enable state management errors that can cause service failures. The initial description explains the root cause: th...
The vulnerability of the mmap() function in the Linux operating system’s kernel, which allows a hacker to cause a service failure
The vulnerability of the mmap function in Linux kernel is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the nfs_local_open_fh function in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the nfslocalopenfh function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the netif_napi_del() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the netifnapidel function in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to state management errors, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the __red_change() function in the Linux operating system’s kernel allows a hacker to execute arbitrary code.
The vulnerability of the redchange function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20250905-07
A vulnerability in the user locking mechanism of the Vault Enterprise and Vault Community Edition enterprise data archiving platforms is due to the application not performing the correct normalization of the application. Enterprise and Vault Community Edition is related to the fact that the...
The vulnerability of the l2cap_sock_resume_cb() function in the Linux kernel’s Bluetooth component, which allows a hacker to cause a service failure
The vulnerability of the l2capsockresumecb function in the Linux kernel’s Bluetooth component is related to errors that occur after freeing resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pnfs_update_layout function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the pnfsupdatelayout function in the Linux operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...
Security update for redis
This update for redis fixes the following issues: CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation and Do...
SUSE-SU-2025:03073-1 Security update for redis
This update for redis fixes the following issues: - CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 - CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation an...
Google Android elevation of privilege vulnerability (CNVD-2026-00036)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a logic error in the code at multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the...
Google Android elevation of privilege vulnerability (CNVD-2026-10643)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a logic error vulnerability, which is caused by a code logic error in multiple functions. An attacker can exploit the vulnerability to cause a local elevation of privilege...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a letter disclosure vulnerability, which is caused by a logic error in multiple locations. An attacker can exploit the vulnerability to potentially cause a local information leak...
Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.
...
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
...
Advisory ROSA-SA-2025-2954
Software: kernel 4.18.0 OS: ROSA Virtualization 2.1 unaffected versions = kernel-4.18.0-553.40.1.el810 affected versions kernel-4.18.0-553.40.1.el810 CVE-ID: CVE-2022-0847 BDU-ID: 2022-01166 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the copypagetoiterpipe and pushpipe functions of the Linux...
