Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a restriction on writing BIOs to partitioned devices that is not handled correctly, which could result in a...

AZL-67217 CVE-2025-39763 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered If a synchronous error is detected as a result of user-space process triggering a 2-bit uncorrected error, the CPU will take a synchronous error...

SUSE-SU-2025:20696-1 Security update for vim

This update for vim fixes the following issues: - CVE-2025-53906: Fixed malicious zip archive causing path traversal bsc1246602 - CVE-2025-53905: Fixed malicious tar archive causing path traversal bsc1246604 - CVE-2025-55157: Fixed use-after-free in internal tuple reference management bsc1247938 ...

The vulnerability of the tegra_crtc_reset() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the tegracrtcreset function in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle synchronization memory errors, which could result in a system reboot or a hard...

The vulnerability of the nfsd4_spo_must_allow() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsd4spomustallow function in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

SUSE-SU-2025:03152-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels bsc1248076. - CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces bsc1248077. -...

The vulnerability of the GNOME graphical interface library libsoup, related to pointer dereferencing errors, allows a hacker to cause a service failure.

The vulnerability of the GNOME graphical interface library libsoup is related to pointer assignment errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2020-13649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scannerreverseinfolist NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2022-20499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no...

CVE-2025-58442 Saleor has user enumeration vulnerability due to different error messages

Saleor is an e-commerce platform. Starting in version 3.21.0 and prior to version 3.21.16, requesting certain fields in the response of accountRegister may result in errors that could unintentionally reveal whether a user with the provided email already exists in Saleor. Version 3.21.16 fixes the...

CVE-2025-58759: Improper Input Validation

TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended characters including or comment text...

Google Android Information Disclosure Vulnerability (CNVD-2025-24499)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a letter disclosure vulnerability, which is caused by a logic error in multiple locations. An attacker can exploit the vulnerability to potentially cause a local information leak...

Google Android elevation of privilege vulnerability (CNVD-2025-23046)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that is caused by background activity that may be initiated as a result of logic errors in multiple functions of LocationProviderManager.java. An attacker...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B arises from synchronization errors when using shared resources. This “race-to-obtain” situation allows attackers to circumvent security restrictions.

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to synchronization errors when using a shared resource. This “race-to-win” scenario allows a malicious actor to circumvent security...

The vulnerabilities of the Full Client and Host/Custom Host modules of the TeamViewer Remote software allow a hacker to load arbitrary files or cause service interruptions.

The vulnerability of the Full Client and Host/Custom Host modules of the TeamViewer Remote software for remote control of computers is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to load arbitrary files with SYSTEM privileges...

The vulnerability of the phpseclib cryptographic protocol library, related to errors in verifying the cryptographic signature, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the phpseclib cryptographic protocol library is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Go programming language, related to synchronization errors when using a shared resource, allows attackers to cause service failures.

The vulnerability of the Go programming language is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2025-39726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/ism: fix concurrency management in ismcmd The s390x ISM device data sheet clearly states that only one request-response sequence is allowable per ISM...

CVE-2025-39726

CVE-2025-39726 concerns the s390 Linux kernel ISM driver. The connected BDU entry notes that vulnerabilities in the functions ism_cmd() and ism_probe() in drivers/s390/net/ism_drv.c enable state management errors that can cause service failures. The initial description explains the root cause: th...