Cryptographic Failure Third-Party Dependency in Bitbucket Data Center and Server - CVE-2022-24771

This High severity vulnerability known as CVE-2022-24771 was introduced in 8.19.0, 8.19.1, 8.19.2, 8.19.3, 8.19.4, 8.19.5, 8.19.6, 8.19.7, 8.19.8, 8.19.9, 8.19.10, 8.19.11, 8.19.12, 8.19.13, 8.19.14, 8.19.15 of Bitbucket Data Center and Server. This vulnerability with a CVSS Score of 7.5 and a CV...

Protection Mechanism Failure

Overview chrome-devtools-frontend is a Chrome DevTools UI Affected versions of this package are vulnerable to Protection Mechanism Failure via the inspectedWindow.reload method and resource access functions in the DevTools Extensions API. An attacker can escape the extension sandbox and access or...

SUSE CVE-2025-40162

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd/sdwutils: avoid NULL deref when devmkasprintf fails devmkasprintf may return NULL on memory allocation failure, but the debug message prints cpus-dainame before checking it. Move the devdbg call after the NULL check to...

SUSE CVE-2025-40189

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix lost EEPROM read timeout error-ETIMEDOUT in lan78xxreadraweeprom Syzbot reported read of uninitialized variable BUG with following call stack. lan78xx 8-1:1.0 unnamed netdevice uninitialized: EEPROM read...

SUSE CVE-2025-40207

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-subdev: Fix alloc failure check in v4l2subdevcallstatetry v4l2subdevcallstatetry macro allocates a subdev state with v4l2subdevstatealloc, but does not check the returned value. If v4l2subdevstatealloc fails, it retur...

SUSE CVE-2025-40208

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa00000.video-codec: Direct firmware load for qcom/vpu/vpu33p4.mbn failed with error -2 qcom-iris aa00000.video-codec:...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost versions 10.11.3 and prior to 10.11.x, 10.5.11 and prior to 10.5.x, and 10.12.0 and prior to 10.12.x. The vulnerability stems from failure to purge user...

Intel CIP elevation of privilege vulnerability (CNVD-2025-28674)

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from a protection mechanism failure, which can be exploited by an attacker to cause an elevation...

Intel CIP Information Disclosure Vulnerability

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an information disclosure vulnerability that stems from a protection mechanism failure, which can be exploited by an attacker to cause information...

The vulnerability of the bpf_exec_tx_verdict() function in the Linux operating system’s bpf component allows a hacker to induce a service failure.

The vulnerability of the bpfexectxverdict function in the Linux operating system’s bpf component is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dm_revalidate_zones() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dmrevalidatezones function in the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the ttm_lru_bulk_move_del function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ttmlrubulkmovedel function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

Vulnerability of the of_modalias() function in the drivers/of/module.c module – A driver for supporting Linux operating system’s device and kernel open firmware, which allows a remote attacker to trigger a service failure.

Vulnerability of the ofmodalias function in the drivers/of/module.c module – The driver for supporting Linux operating system’s device and open-source kernel updates is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the vsock_find_cid() function in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the vsockfindcid function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the arch_syncKernel_mappings() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the archsynckernelmappings function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the s390 kernel component of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the s390 kernel component of the Linux operating system is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __cifs_sfu_make_node() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cifssfumakenode function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ocfs2_delete_osb() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ocfs2deleteosb function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __iodyn_find_io_region() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the iodynfindioregion function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __populate_section_memmap() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the populatesectionmemmap function in the Linux operating system is related to improper cleanup or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...