The vulnerability of the nfs_local_open_fh function in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the nfslocalopenfh function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the smb2_sess_setup() function in the fs/smb/server/smb2pdu.c module of the SMB server support module for Linux operating systems allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the SMB server support in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality,...

The vulnerability of the mmap() function in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the mmap function in Linux kernel is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the pnfs_update_layout function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pnfsupdatelayout function in the Linux operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the netif_napi_del() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the netifnapidel function in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the l2cap_sock_resume_cb() function in the Linux kernel’s Bluetooth component, which allows a hacker to cause a service failure

The vulnerability of the l2capsockresumecb function in the Linux kernel’s Bluetooth component is related to errors that occur after freeing resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20250905-07

A vulnerability in the user locking mechanism of the Vault Enterprise and Vault Community Edition enterprise data archiving platforms is due to the application not performing the correct normalization of the application. Enterprise and Vault Community Edition is related to the fact that the...

The vulnerability of the Linux operating system’s kernel, related to state management errors, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __red_change() function in the Linux operating system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the redchange function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Security update for redis

This update for redis fixes the following issues: CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation and Do...

SUSE-SU-2025:03073-1 Security update for redis

This update for redis fixes the following issues: - CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. bsc1246059 - CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protocol erros can lead to client starvation an...

Google Android elevation of privilege vulnerability (CNVD-2026-10643)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a logic error vulnerability, which is caused by a code logic error in multiple functions. An attacker can exploit the vulnerability to cause a local elevation of privilege...

Google Android elevation of privilege vulnerability (CNVD-2026-00036)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a logic error in the code at multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a letter disclosure vulnerability, which is caused by a logic error in multiple locations. An attacker can exploit the vulnerability to potentially cause a local information leak...

Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.

...

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.

...

Advisory ROSA-SA-2025-2954

Software: kernel 4.18.0 OS: ROSA Virtualization 2.1 unaffected versions = kernel-4.18.0-553.40.1.el810 affected versions kernel-4.18.0-553.40.1.el810 CVE-ID: CVE-2022-0847 BDU-ID: 2022-01166 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the copypagetoiterpipe and pushpipe functions of the Linux...

The vulnerability of the ocfs2_rename() function in the fs/ocfs2/namei.c module of the OCFS2 file system support module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ocfs2rename function in the fs/ocfs2/namei.c module of the OCFS2 file system support in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Vulnerability of the spi_unregister_controller() function in the drivers/spi/spi.c module – This driver for supporting SPI devices in the Linux kernel allows a hacker to cause a service failure.

Vulnerability of the spiunregistercontroller function in the drivers/spi/spi.c module – The Linux kernel’s SPI device driver has synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the system-mounted authentication module in Synology DiskStation Manager (DSM) is related to errors in the certificate validation process, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the system-mounted authentication module in the Synology DiskStation Manager DSM is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...