Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an error not being handled correctly when a checkpoint metadata exception occurs, which could lead to kernel...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414645 advisory. An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414639 advisory. An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-431158)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-431158 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Modify the print level of CQE error Too much print may lead to a panic in kernel. Chang...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-413652)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-413652 advisory. In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccpv4err/dccpv6err again dh-dccphx is the 9th byte offset 8 in struct dccphdr, not in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect handling of device registration errors, which could lead to a memory leak...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986378 advisory. In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccpv4err/dccpv6err again dh-dccphx is the 9th byte offset 8 in struct dccphdr, not in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-401634)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-401634 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfsfindentry Syzbot reported that a task hang occu...

CVE-2025-58586 User Enumeration by excessive error output

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...

EUVD-2025-32508

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...

CVE-2025-58586

CVE-2025-58586 affects SICK Enterprise Analytics and SICK Logistic Analytics products. The vulnerability stems from distinct error messages for login failures (incorrect password vs. non-existent username), enabling attacker-driven username enumeration. Reported impact: information disclosure (us...

CVE-2025-58586 User Enumeration by excessive error output

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one...

The vulnerability of the switchdev component in the Linux operating system’s kernel allows a hacker to compromise data integrity.

The vulnerability of the switchdev component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to compromise data integrity...

The vulnerability of the changeAttribute function in the Libmysofa library for audio processing allows a intruder to trigger a service failure.

The vulnerability of the changeAttribute function in the Libmysofa library for audio processing is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the verifyAttribute function in the library for working with audio in Libmysofa allows a intruder to trigger a service failure.

The vulnerability of the verifyAttribute function in the Libmysofa library for audio processing is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the H5O_sdspace_encode() function in the H5Osdspace.c component of the HDF file processing library allows a attacker to cause a service failure.

The vulnerability of the H5Osdspaceencode function in the H5Osdspace.c component of the HDF file processing library is related to pointer manipulation errors. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created HDF5 file...

ROS-20251006-01

A vulnerability in the certtool utility of the GnuTLS transport layer security library is related to an operation exceeding the buffer boundaries. operation outside of a buffer in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

SUSE CVE-2023-53562

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case a subcomponent fails to bind. Patchwork: https://patchwork.freedesktop.org/patch/525094/...

CVE-2023-53600

In the Linux kernel, the following vulnerability has been resolved: tunnels: fix kasan splat when generating ipv4 pmtu error If we try to emit an icmp error in response to a nonliner skb, we get BUG: KASAN: slab-out-of-bounds in ipcomputecsum+0x134/0x220 Read of size 4 at addr ffff88811c50db00 by...

AZL-77438 CVE-2023-53562 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix vram leak on bind errors Make sure to release the VRAM buffer also in a case a subcomponent fails to bind. Patchwork: https://patchwork.freedesktop.org/patch/525094/...