CVE-2022-50406

In the Linux kernel, the following vulnerability has been resolved: iomap: iomap: fix memory corruption when recording errors during writeback Every now and then I see this crash on arm64: Unable to handle kernel NULL pointer dereference at virtual address 00000000000000f8 Buffer I/O error on dev...

CVE-2023-53440 nilfs2: fix sysfs interface lifetime

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix sysfs interface lifetime The current nilfs2 sysfs support has issues with the timing of creation and deletion of sysfs entries, potentially leading to null pointer dereferences, use-after-free, and lockdep warnings...

CVE-2023-53438 x86/MCE: Always save CS register on AMD Zen IF Poison errors

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on current AMD Zen-based systems do not guarantee a synchronous MC is delivered for poison consumption errors. Therefore,...

CVE-2023-53438 x86/MCE: Always save CS register on AMD Zen IF Poison errors

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on current AMD Zen-based systems do not guarantee a synchronous MC is delivered for poison consumption errors. Therefore,...

CVE-2023-53438 x86/MCE: Always save CS register on AMD Zen IF Poison errors

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on current AMD Zen-based systems do not guarantee a synchronous MC is delivered for poison consumption errors. Therefore,...

CVE-2022-50406 iomap: iomap: fix memory corruption when recording errors during writeback

In the Linux kernel, the following vulnerability has been resolved: iomap: iomap: fix memory corruption when recording errors during writeback Every now and then I see this crash on arm64: Unable to handle kernel NULL pointer dereference at virtual address 00000000000000f8 Buffer I/O error on dev...

CVE-2022-50406

CVE-2022-50406 affects the Linux kernel iomap/writeback path. Connected advisories confirm a memory corruption fix during writeback error recording, described as: “iomap: iomap: fix memory corruption when recording errors during writeback.” The issue is associated with the kernel code path handli...

The vulnerability of the AppleMobileFileIntegrity component in operating systems such as iOS, iPadOS, tvOS, watchOS, visionOS, and macOS allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the AppleMobileFileIntegrity component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information...

The vulnerability of the Launch Services interface for iOS and iPadOS allows a hacker to track user keyboard inputs.

The vulnerability of the Launch Services interface for iOS and iPadOS is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor to remotely monitor user keyboard inputs...

PT-2025-38457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the x86/MCE subsystem related to handling Machine Check Exceptions MCE on AMD Zen-based systems. Specifically, the Instruction Fetch IF units may...

CVE-2023-53438: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on current AMD Zen-based systems do not guarantee a synchronous MC is delivered for poison consumption errors. Therefore,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory corruption issue in iomap when logging write-back errors, which could lead to null pointer...

CVE-2025-35436

CVE-2025-35436 affects the CISA Thorium framework used for malware analysis. The vulnerability arises from using .unwrap() to handle errors in account verification email logic, enabling an unauthenticated remote attacker to crash the service by supplying a crafted email address/response. The issu...

CVE-2025-35436 CISA Thorium account verification email error handling

CISA Thorium uses '.unwrap' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27...

CVE-2023-53338

In the Linux kernel, the following vulnerability has been resolved: lwt: Fix return values of BPF xmit ops BPF encap ops can return different types of positive values, such like NETRXDROP, NETXMITCN, NETDEVTXBUSY, and so on, from function skbdoredirect and bpflwtxmitreroute. At the xmit hook, suc...

The vulnerability of the isolated Sandbox software environment in operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS allows a hacker to bypass the sandbox protection mechanism.

The vulnerability of the isolated Sandbox software environment in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow attackers to bypass the sandbox’s security mechanisms...

The vulnerability of the IOKit component in iOS, iPadOS, tvOS, watchOS, and macOS allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the IOKit component in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the net: marvell: prestera component not properly referencing the nexthop id when processing IPv4 routes,...

Linux Distros Unpatched Vulnerability : CVE-2023-53313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - md/raid10: fix wrong setting of maxcorrreaderrors There is no input check when echo md/maxreaderrors and overflow might occur. Add check of input number...

Linux Distros Unpatched Vulnerability : CVE-2025-39835

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: do not propagate ENODATA disk errors into xattr code ENODATA aka ENOATTR has a very specific meaning in the xfs xattr code; namely, that the requested...