php: Reference counting in php_request_shutdown causes Use-After-Free

A flaw was found in PHP. This vulnerability allows remote code execution via a crafted code path involving the set magic method or the null coalescing assignment ??= operator, in combination with exception handling. Attackers can trigger a use-after-free condition by controlling the memory layout...

tomcat: Apache Tomcat: Authentication bypass when using Jakarta Authentication API

A flaw was found in Apache Tomcat when configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component. This vulnerability allows authentication bypass via improperly handled exceptions during the authentication process...

php: Reference counting in php_request_shutdown causes Use-After-Free

A flaw was found in PHP. This vulnerability allows remote code execution via a crafted code path involving the set magic method or the null coalescing assignment ??= operator, in combination with exception handling. Attackers can trigger a use-after-free condition by controlling the memory layout...

SUSE-SU-2025:1540-1 Security update for transfig

This update for transfig fixes the following issues: - CVE-2025-31164: Fixed heap-buffer overflow in fig2dev createlinewithspline function bsc1240379 - CVE-2025-31162: Fixed floating point exception in fig2dev getslope function bsc1240380 - CVE-2025-31163: Fixed segmentation fault in fig2dev...

Security update for transfig

This update for transfig fixes the following issues: CVE-2025-31164: Fixed heap-buffer overflow in fig2dev createlinewithspline function bsc1240379 CVE-2025-31162: Fixed floating point exception in fig2dev getslope function bsc1240380 CVE-2025-31163: Fixed segmentation fault in fig2dev...

kernel: net/ipv6: release expired exception dst cached in socket

In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6negativeadvice when this function is executed for an expired IPv6 route located in the exception table. There are several conditions that must ...

kernel: arm64: set __exception_irq_entry with __irq_entry as a default

A stack trace handling issue was found in ARM64 kernels. Without CONFIGFUNCTIONGRAPHTRACER, the IRQ entry function is not properly marked, causing filterirqstacks to fail and potentially causing stack depot overflow warnings under KASAN...

Intel Processors 安全漏洞

Intel Processors is a family of processors produced by Intel Corporation, covering a wide range of laptop, desktop, workstation, and server applications, providing basic to professional-level performance support. A denial of service vulnerability exists in Intel Processors that stems from an...

Phoenix SecureCore 安全漏洞

Phoenix SecureCore is a computer based input/output system from Phoenix Contact Phoenix, Germany. A security vulnerability exists in Phoenix SecureCore that stems from an improperly checked exception condition that could lead to input data manipulation...

PT-2025-21083

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue concerns an uncaught exception in the core management mechanism of some IntelR Processors. This may allow an authenticated user to potentially enable denial of service v...

MGASA-2025-0152 Updated transfig packages fix security vulnerabilities

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via getslope function. CVE-2025-31162 Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via putpatternarc function...

Updated transfig packages fix security vulnerabilities

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via getslope function. CVE-2025-31162 Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via putpatternarc function...

OSV-2025-354 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416762645 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement java.base/jdk.internal.misc.Unsafe.weakCompareAndSetInt...

PT-2025-21908 · Git +1 · Checkstyle

Name of the Vulnerable Software and Affected Versions: Checkstyle affected versions not specified Description: The software experiences a security exception during the parsing of Java statements within the com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement function. The cra...

CVE-2025-37846

CVE-2025-37846 (Linux kernel, arm64) is a vulnerability in the mops path that incorrectly dereferenced the source register during a SET* sequence. The root cause is that the source register (not used for SET* operations) could be read, leading to a UBSAN out-of-bounds array access when the MOPS e...

CVE-2025-37846 arm64: mops: Do not dereference src reg for a set operation

In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not used for SET and reading it can result in a UBSAN out-of-bounds array access error, specifically when the MOPS exception is taken from a SET...

SUSE CVE-2022-49886

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Panic on bad configs that VE on "private" memory access All normal kernel memory is "TDX private memory". This includes everything from kernel stacks to kernel text. Handling exceptions on arbitrary accesses to kernel...

OSV-2025-348 Security exception in org.apache.lucene.analysis.miscellaneous.ConcatenateGraphFilter$BytesRefBuilderT

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416302801 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ConcatenateGraphFilter$BytesRefBuilderT org.apache.lucene.analysis.miscellaneous.ConcatenateGraphFilter$BytesRefBuilderT...

The vulnerability of software for integrating old and new technologies from IBM EntireX, related to a processing error in exception states, allows a perpetrator to trigger a service failure.

The vulnerability of the software for integrating old and new technologies from IBM EntireX is related to an error in handling exceptional states. Exploiting this vulnerability can allow a perpetrator to trigger a service failure...

PT-2025-21906 · Git +1 · Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: The software is susceptible to a security exception during the cloning of an AttributeSource$State object within the ConcatenateGraphFilter$BytesRefBuilderT class. The issue occurs wh...