RHEL 9 : kernel (RHSA-2025:22392)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22392 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nfsd: handle getclientlocked...

RHEL 8 : kernel (RHSA-2025:22388)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22388 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nfsd: handle getclientlocked...

Vulnerability of the intel_dp_hdcp2_get_capability() function in the drivers/gpu/drm/i915/display/intel_dp_hdcp.c module – A driver for supporting Linux’s Direct Rendering Infrastructure (DRI), which allows a hacker to trigger a service failure.

Vulnerability of the inteldphdcp2getcapability function in the drivers/gpu/drm/i915/display/inteldphdcp.c module – The Linux DRI driver is vulnerable due to pointer manipulation issues. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `blk_mq_init_allocated_queue()` function in the `block/blk-mq.c` module, which supports the block-level kernel in the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the blkmqinitallocatedqueue function in the block/blk-mq.c module, which supports the block-level kernel in the Linux operating system, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `ice_sriov_set_msix_vec_count()` function in the `drivers/net/ethernet/intel/ice/ice_sriov.c` file of the Linux kernel’s Ethernet network adapter driver allows a hacker to cause a service failure.

The vulnerability of the icesriovsetmsixveccount function in the drivers/net/ethernet/intel/ice/icesriov.c file of the Linux kernel’s Ethernet driver module is related to improper resource management. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the __tracing_map_insert() function in the kernel/trace/tracing_map.c module, which supports Linux operating system kernel tracing, allows a hacker to cause a service failure.

The vulnerability of the tracingmapinsert function in the kernel/trace/tracingmap.c module, which supports kernel tracing in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-66459

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, a XSS vulnerability can be triggered when a user submits a list of URLs to capture, one of them contains a HTML element, and the capture fails. Then, t...

EUVD-2025-200304

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, a XSS vulnerability can be triggered when a user submits a list of URLs to capture, one of them contains a HTML element, and the capture fails. Then, t...

CVE-2025-66459 Lookyloo vulnerable to XSS due to unescaped error message passed to innerHTML

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to 1.35.3, a XSS vulnerability can be triggered when a user submits a list of URLs to capture, one of them contains a HTML element, and the capture fails. Then, t...

CVE-2025-11789

Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'DownloadFile' function converts a parameter to an integer using 'atoi' and then uses it as an index in the 'FilesDownload' array with '&FilesDownloadiVar2'. If the parameter is too large, it will access memory beyond...

OPENSUSE-SU-2025:20132-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...

EUVD-2025-200218

Mattermost versions 10.11.x = 10.11.4, 10.5.x = 10.5.12 fail to validate the user permission when accessing the files and subscribing to the block in Boards, which allows an authenticated user to access other board files and was able to subscribe to the block from other boards that the user does...

CVE-2025-20789

In GPU pdma, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117741; Issue ID: MSV-4538...

CVE-2025-58488

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability...

The vulnerability in the module sound/soc/intel/boards/bytcr_rt5640.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the sound/soc/intel/boards/bytcrrt5640.c kernel of the Linux operating system relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the `dc_stream_set_cursor_attributes()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dcstreamsetcursorattributes function in the Linux operating system is related to the pointer L being reassigned. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the switch_mm_irqs_off() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the switchmmirqsoff function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `get_netdev_for_sock()` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the getnetdevforsock function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerabilities in the modules include/net/ip_tunnels.h, net/ipv4/ip_tunnel.c, and net/ipv6/ip6_tunnel.c of the Linux operating system’s kernel, which allow a hacker to cause a service failure.

The vulnerability in the modules include/net/iptunnels.h, net/ipv4/iptunnel.c, and net/ipv6/ip6tunnel.c of the Linux operating system is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failur...

Vulnerabilities in the modules fs/nfsd/nfs4proc.c, fs/nfsd/nfs4state.c, fs/nfsd/nfs4xdr.c, fs/nfsd/nfsd.h, and fs/nfsd/xdr4.h of the Linux operating system’s kernel, which allow a hacker to cause a service failure

The vulnerabilities in the modules fs/nfsd/nfs4proc.c, fs/nfsd/nfs4state.c, fs/nfsd/nfs4xdr.c, fs/nfsd/nfsd.h, and fs/nfsd/xdr4.h of the Linux operating system are related to incorrect calculations. Exploiting these vulnerabilities can allow an attacker to cause service failures...