AZL-69640 CVE-2025-23135 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Teardown riscv specific bits after kvmexit During a module removal, kvmexit invokes arch specific disable call which disables AIA. However, we invoke aiaexit before kvmexit resulting in the following warning. KVM...

DEBIAN-CVE-2025-23135

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Teardown riscv specific bits after kvmexit During a module removal, kvmexit invokes arch specific disable call which disables AIA. However, we invoke aiaexit before kvmexit resulting in the following warning. KVM...

DEBIAN-CVE-2025-22126

In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating allmddevs list While iterating allmddevs list from mdnotifyreboot and mdexit, listforeachentrysafe is used, and this can race with deletint the next mddev, causing UAF: t1: spinlock...

UBUNTU-CVE-2025-22126

In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating allmddevs list While iterating allmddevs list from mdnotifyreboot and mdexit, listforeachentrysafe is used, and this can race with deletint the next mddev, causing UAF: t1: spinlock...

UBUNTU-CVE-2025-23135

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Teardown riscv specific bits after kvmexit During a module removal, kvmexit invokes arch specific disable call which disables AIA. However, we invoke aiaexit before kvmexit resulting in the following warning. KVM...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improper link-state exit when PCI/ASPM removes upstream functionality, which could lead to memory...

The vulnerability of the throttle_direct_reclaim function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the throttledirectreclaim function in Linux kernel relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2025-22218

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A vulnerability in the Linux kernel has been resolved, related to KVM Kernel-based Virtual Machine and SVM Secure Virtual Machine. The issue occurs when a triple fault happens in...

The vulnerability of the pinctrl component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the pinctrl component in the Linux operating system’s kernel is related to the execution of a loop with an unavailable exit condition in the ocelotirqhandler function. Exploiting this vulnerability can allow an attacker to cause a service failure...

gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().

...

PT-2025-18395

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc3 Description A vulnerability in the Linux kernel has been resolved, specifically in the KVM Kernel-based Virtual Machine module. The issue arises when the vCPU is in L2 with INIT and a TRIPLE FAULT...

The vulnerability of the efi_mokvar_table_init() function (drivers/firmware/efi/mokvar-table.c) in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the efimokvartableinit function drivers/firmware/efi/mokvar-table.c in the Linux kernel involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the print_info() function in the src/iinfo/iinfo.cpp module of the OpenImageIO library allows a attacker to cause a service failure.

The vulnerability of the printinfo function in the src/iinfo/iinfo.cpp module of the OpenImageIO library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the `ustring::make_unique()` function in the `src/libutil/ustring.cpp` module of the OpenImageIO library allows a malicious actor to cause a service failure.

The vulnerability of the ustring::makeunique function in the src/libutil/ustring.cpp module of the OpenImageIO library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service failures...

CVE-2025-31591

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in promoz73 Exit Popup Free exit-popup-free allows Stored XSS.This issue affects Exit Popup Free: from n/a through = 1.0...

SUSE CVE-2025-31160

atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop...

Vulnerability of the pvr2_context_exit() function in the drivers/media/usb/pvrusb2/pvrusb2-context.c file – This driver is a Linux kernel-based driver for supporting multimedia devices connected via USB. It allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the pvr2contextexit function in the drivers/media/usb/pvrusb2/pvrusb2-context.c module – The Linux kernel’s USB multimedia device driver architecture relies on the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

WordPress Exit Popup Free plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pham Van Tam in WordPress Plugin Exit Popup Free versions = 1.0...

CVE-2025-31591

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in promoz73 Exit Popup Free exit-popup-free allows Stored XSS.This issue affects Exit Popup Free: from n/a through = 1.0...

CVE-2025-31591 WordPress Exit Popup Free plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in promoz73 Exit Popup Free exit-popup-free allows Stored XSS.This issue affects Exit Popup Free: from n/a through = 1.0...