CVE-2025-20789

In GPU pdma, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117741; Issue ID: MSV-4538...

CVE-2025-58488

Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required for triggering this vulnerability...

The vulnerability in the module sound/soc/intel/boards/bytcr_rt5640.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the sound/soc/intel/boards/bytcrrt5640.c kernel of the Linux operating system relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the `dc_stream_set_cursor_attributes()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dcstreamsetcursorattributes function in the Linux operating system is related to the pointer L being reassigned. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the switch_mm_irqs_off() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the switchmmirqsoff function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `get_netdev_for_sock()` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the getnetdevforsock function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerabilities in the modules include/net/ip_tunnels.h, net/ipv4/ip_tunnel.c, and net/ipv6/ip6_tunnel.c of the Linux operating system’s kernel, which allow a hacker to cause a service failure.

The vulnerability in the modules include/net/iptunnels.h, net/ipv4/iptunnel.c, and net/ipv6/ip6tunnel.c of the Linux operating system is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failur...

Vulnerabilities in the modules fs/nfsd/nfs4proc.c, fs/nfsd/nfs4state.c, fs/nfsd/nfs4xdr.c, fs/nfsd/nfsd.h, and fs/nfsd/xdr4.h of the Linux operating system’s kernel, which allow a hacker to cause a service failure

The vulnerabilities in the modules fs/nfsd/nfs4proc.c, fs/nfsd/nfs4state.c, fs/nfsd/nfs4xdr.c, fs/nfsd/nfsd.h, and fs/nfsd/xdr4.h of the Linux operating system are related to incorrect calculations. Exploiting these vulnerabilities can allow an attacker to cause service failures...

Vulnerability of the acpi_video_switch_brightness() function (drivers/acpi/acpi_video.c) in the Linux kernel, allowing a hacker to trigger a service failure

The vulnerability of the acpivideoswitchbrightness function drivers/acpi/acpivideo.c in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the bpf_redirect_neigh() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the bpfredirectneigh function in the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mm/hugetlb.c module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mm/hugetlb.c module in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the devm_kasprintf() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the devmkasprintf function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-66448 vLLM vulnerable to remote code execution via transformers_utils/get_config

vLLM is an inference and serving engine for large language models LLMs. Prior to 0.11.1, vllm has a critical remote code execution vector in a config class named NemotronNanoVLConfig. When vllm loads a model config that contains an automap entry, the config class resolves that mapping with...

CVE-2025-11699

nopCommerce v4.70 and prior, and version 4.80.3, does not invalidate session cookies after logout or session termination, allowing an attacker who has a a valid session cookie access to privileged endpoints such as /admin even after the legitimate user has logged out, enabling session hijacking...

CVE-2025-11699 CVE-2025-11699

nopCommerce v4.70 and prior, and version 4.80.3, does not invalidate session cookies after logout or session termination, allowing an attacker who has a a valid session cookie access to privileged endpoints such as /admin even after the legitimate user has logged out, enabling session hijacking...

kernel: ice: ice_adapter: release xa entry on adapter allocation failure

A NULL pointer dereference exists in the Linux kernel such that ice: iceadapter fails to release a reserved XArray entry when iceadapternew fails. As a result, subsequent insertions at the same index may return -EBUSY, which can lead to damage to system availability, integrity, and confidentialit...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory

A use-after-free memory bug exists in the linux kernel, such that unpoisonmemory tries to check the PGHWPoison flags of an uninitialized page. So VMBUGONPAGEPagePoisonedpage is triggered, leading to damage to the system availability and integrity...

kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory

A use-after-free memory bug exists in the linux kernel, such that unpoisonmemory tries to check the PGHWPoison flags of an uninitialized page. So VMBUGONPAGEPagePoisonedpage is triggered, leading to damage to the system availability and integrity...

ALSA-2025:22387 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: nfsd: handle getclientlocked failure in nfsd4setclientidconfirm CVE-2025-38724 kernel: smb: client: fix race with concurrent opens...