1327 matches found
DEBIAN-CVE-2025-21897
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix picktaskscx picking non-queued tasks when it's called without balance a6250aa251ea "schedext: Handle cases where picktaskscx is called without preceding balancescx" added a workaround to handle the cases where...
UBUNTU-CVE-2025-21897
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix picktaskscx picking non-queued tasks when it's called without balance a6250aa251ea "schedext: Handle cases where picktaskscx is called without preceding balancescx" added a workaround to handle the cases where...
Malicious code in kagi_browser_ext (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d43b7fd2a47594e2b75e6634bd546cec8f3fb5d8c20181ce0f6ed15e368a91bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Vulnerability of the functions get_ext_path(), ext4_find_extent(), and ext4_split_extent_at() in the Linux operating system’s kernel, allowing a hacker to cause a service failure
The vulnerability of the functions getextpath, ext4findextent, and ext4splitextentat in the Linux operating system is related to the lack of memory release after the effective lifespan of these functions has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-30157
Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy's extproc HTTP filter is at risk of crashing if a local reply is sent to the external server due to the filter's life time issue. A known situation is the failure of a websocket...
ai.h2o:h2o-app (>=3.22.0.1, <=3.28.0.3), ai.h2o:h2o-automl (>=3.22.0.1, <=3.28.0.3) +16 more potentially affected by CVE-2024-10572 via ai.h2o:h2o-ext-xgboost (>=3.10.5.1, <=3.46.0.11)
ai.h2o:h2o-ext-xgboost MAVEN version =3.10.5.1, =3.22.0.1, =3.22.0.1, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =1.6.12, =2.0.10, =3.30.0.5-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =1.6.12, =2.0.10, =3.30.0.5-1-3.0, =1.6.12, =2.0.10, =3.30.0.5-1-3.0, =3.46.0.6-1-3.5 and more Source cves: CVE-2024-10572...
Malicious code in data-ext-extra (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da42338e541d2556618253303cbf11b710a062fa58a2dc476baca9aaf8234cbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2251 Malicious code in data-ext-extra (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da42338e541d2556618253303cbf11b710a062fa58a2dc476baca9aaf8234cbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in amazon-codewhisperer-jupyterlab-ext (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a4e17673b58fae37b25deaea3bf55c6fdb9a69285dde321917e6e775d7cdf57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2022-49174
In the Linux kernel, the following vulnerability has been resolved: ext4: fix ext4mbmarkbb with flexbg with fastcommit In case of flexbg feature which is by default enabled, extents for any given inode might span across blocks from two different block group. ext4mbmarkbb only reads the bufferhead...
UBUNTU-CVE-2024-58000
In the Linux kernel, the following vulnerability has been resolved: iouring: prevent reg-wait speculations With ENTEREXTARGREG instead of passing a user pointer with arguments for the waiting loop the user can specify an offset into a pre-mapped region of memory, in which case the offset, offset ...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in medikoo es5-ext
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of medikoo es5-ext. Vulnerability Details CVEID:CVE-2024-27088 DESCRIPTION: es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or...
CVE-2022-24803
Asciidoctor-include-ext is Asciidoctor’s standard include processor reimplemented as an extension. Versions prior to 0.4.0, when used to render user-supplied input in AsciiDoc markup, may allow an attacker to execute arbitrary system commands on the host operating system. This attack is possible...
Important: kernel-livepatch-6.1.112-124.190
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfochangednotify CVE-2024-36899 In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesyste...
SUSE-SU-2025:20073-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52610: net/sched: actct: fix skb leak and crash on ooo frags bsc1221610. - CVE-2023-52752: smb: client: fix use-after-free bug in cifsdebugdataprocshow...
SUSE CVE-2025-21657
In the Linux kernel, the following vulnerability has been resolved: schedext: Replace rqlock to rawspinrqlock in scxopsbypass scxopsbypass iterates all CPUs to re-enqueue all the scx tasks. For each CPU, it acquires a lock using rqlock regardless of whether a CPU is offline or the CPU is currentl...
DEBIAN-CVE-2025-21657
In the Linux kernel, the following vulnerability has been resolved: schedext: Replace rqlock to rawspinrqlock in scxopsbypass scxopsbypass iterates all CPUs to re-enqueue all the scx tasks. For each CPU, it acquires a lock using rqlock regardless of whether a CPU is offline or the CPU is currentl...
UBUNTU-CVE-2025-21657
In the Linux kernel, the following vulnerability has been resolved: schedext: Replace rqlock to rawspinrqlock in scxopsbypass scxopsbypass iterates all CPUs to re-enqueue all the scx tasks. For each CPU, it acquires a lock using rqlock regardless of whether a CPU is offline or the CPU is currentl...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from the use of an inappropriate lock in the scxopsbypass function in the schedext module. This could lead to unwanted...
