The vulnerability of the __sk_dst_get() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the skdstget function in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-68334

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Add support for Van Gogh SoC The ROG Xbox Ally non-X SoC features a similar architecture to the Steam Deck. While the Steam Deck supports S3 s2idle causes a crash, this support was dropped by the Xbox Ally...

CVE-2025-68328

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix bug in saving controller data Fix the incorrect usage of platformsetdrvdata and devsetdrvdata. They both are of the same data and overrides each other. This resulted in the rmmod of the svc driver to...

The vulnerability of the ip6_xmit() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ip6xmit function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pid_nr_ns() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pidnrns function in the Linux operating system’s kernel is related to an error in pointer arithmetic. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from insufficient support for Van Gogh SoCs in the amd/pmc driver, which could result in the device failing to ha...

The vulnerability of the __dm_suspend() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dmsuspend function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the tls_strp_msg_hold() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the tlsstrpmsghold function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the regcomp function in the system library glibc, which allows a hacker to cause a service failure

The vulnerability of the regcomp function in the glibc system library is related to the repeated release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted request...

The vulnerability of the kvmalloc() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kvmalloc function in the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-38956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the dm driver, the failure to implement its own timeout handler while relying on slave devices leads to an issue where requests are leaked and never completed if an io-timeout-fail...

CVE-2025-66500 Foxit webplugins.foxit.com Stored Cross-Site Scripting via postMessage Vulnerability

A stored cross-site scripting XSS vulnerability exists in webplugins.foxit.com. A postMessage handler fails to validate the message origin and directly assigns externalPath to a script source, allowing an attacker to execute arbitrary JavaScript when a crafted postMessage is received...

The vulnerability of the memfd_pin_folios() function in the mm/gup.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the memfdpinfolios function in the mm/gup.c module of the Linux kernel’s memory management subsystem leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the dcn201_acquire_free_pipe_for_layer() function in the drivers/gpu/drm/amd/display/dc/dcn201/dcn201_resource.c driver module allows a hacker to trigger a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support for AMD graphics cards in Linux operating systems.

The vulnerability of the dcn201acquirefreepipeforlayer function in the drivers/gpu/drm/amd/display/dc/dcn201/dcn201resource.c driver module relates to the pointer manipulation in the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems. Exploiting this...

The vulnerability of GNUPlot’s plotting software, related to the manipulation of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of GNUPlot’s graph creation software relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-26121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where the admin tagset is not released if initialization fails during NVMe/FC controller creation. Specifically, the nvme fabrics component creates an...

The vulnerability of the GraphicsMagick graphic editor, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the GraphicsMagick graphic editor is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the containerd execution environment, related to the lack of memory release after the effective lifespan, allows a malicious actor to trigger a service failure.

The vulnerability of the containerd execution environment is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to trigger a service failure...

PT-2026-37472

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm-verity component where the verity fec ctr function does not correctly handle failures during calls to dm bufio client create. If these calls fail, dm bufio clie...

The vulnerability of the console-based graphic editor ImageMagick, related to integer overflow, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...