AZL-74736 CVE-2025-39835 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA aka ENOATTR has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may...

DEBIAN-CVE-2025-39835

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA aka ENOATTR has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may...

CVE-2025-39835 xfs: do not propagate ENODATA disk errors into xattr code

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA aka ENOATTR has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may...

Linux Distros Unpatched Vulnerability : CVE-2022-50248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double free on tx path. We see kernel crashes and lockups and KASAN...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a lack of input checking for md/maxreaderrors, which could lead to an integer overflow...

CVE-2022-50297

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: verify the expected usbendpoints are present The bug arises when a USB device claims to be an ATH9K but doesn't have the expected endpoints. In this case there was an interrupt endpoint where the driver expected a bu...

CVE-2022-50248

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix double free on tx path. We see kernel crashes and lockups and KASAN errors related to ax210 firmware crashes. One of the KASAN dumps pointed at the tx path, and it appears there is indeed a way to...

CVE-2022-50248

CVE-2022-50248 is a Linux kernel vulnerability affecting the iwlwifi/iwl mvm TX path where a double-free of skb can occur. The issue arises when iwl_mvm_tx_skb_sta returns non-zero and the skb is freed, but a TSO skb buffer may also be freed in an error path; the fix is to return 0 in that error ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly cleaning the stagedconfig temporary storage in rdtdomain, which could lead to MSR access errors...

PT-2025-37634

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.0.3 Description A flaw exists in the Linux kernel related to the handling of PCI devices and simple framebuffer devices. Specifically, the sysfb disable function was not being called before removing PCI devices, leading...

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, relates to access segmentation errors, allowing attackers to escalate their privileges.

The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Win32K component – GRFX in Windows operating systems – allows a hacker to execute arbitrary code.

The vulnerability of the Win32K component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2025-39763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered If a synchronous error is detected as a result of user-space process triggerin...

The vulnerability of the SQL Server relational database management system, related to synchronization errors when using shared resources, allows attackers to disclose sensitive information.

The vulnerability of the Microsoft SQL Server relational database management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the DirectX Graphics Kernel component of the Windows operating system, which allows attackers to exploit their privileges

The vulnerability of the DirectX Graphics Kernel component of the Windows operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the DirectX Graphics Kernel component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the DirectX Graphics Kernel component of the Windows operating system is related to synchronization errors when using a shared resource „Race Condition“. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Connected Devices Platform Service (CDPSvc) in Microsoft Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Connected Devices Platform Service CDPSvc for Microsoft Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-58144

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL...

The vulnerability of the Defender Firewall Service for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Defender Firewall Service for Windows operating systems is related to data type conversion errors. Exploiting this vulnerability can allow attackers to increase their privileges...