33083 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly handling the empty block group case, which could lead to an assertion failure...
The vulnerability in the driver/spi/spi-cadence-quadspi.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/spi/spi-cadence-quadspi.c module in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
SUSE SLED15: strongswan / strongswan-doc / strongswan-hmac / strongswan-ipsec / etc (SUSE-SU-2025:3855-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3855-1 advisory. - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941 Tenable ha...
The vulnerability of the netfs_alloc_request() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the netfsallocrequest function in the Linux operating system is related to errors during the update of the reference counter. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-8165
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s drm/imx/tve subsystem related to device probe leakage. Specifically, the issue involves failing to drop a reference to the DDC device during probe...
Virtuozzo Hybrid Infrastructure 7.0 Hotfix 4 (7.0.0-269)
This update provides stability fixes. Vulnerability id: VSTOR-106269, VSTOR-108984, VSTOR-116630 Stability fixes for the storage service. Vulnerability id: VSTOR-111693 A stability fix for QEMU. Vulnerability id: VSTOR-116184 kRPC failed to connect to certain chunk services. Vulnerability id:...
The vulnerability of the afs_put_server() function in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the afsputserver function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the pagemap_scan_backout_range() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the pagemapscanbackoutrange function in the Linux operating system kernel is related to a pointer swapping error. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities in the modules drivers/media/usb/uvc/uvc_driver.c and drivers/media/usb/uvc/uvcvideo.h of the Linux operating system’s UVC driver module allow a hacker to cause a service failure.
The vulnerability in the drivers/media/usb/uvc/uvcdriver.c and drivers/media/usb/uvc/uvcvideo.h files of the UVC driver for the Linux operating system is related to incorrect assignment of identifiers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the smc_rx_splice() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the smcrxsplice function in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-58189
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...
Microsoft Outage Hits Azure, 365, Xbox, Minecraft and More
A major Microsoft outage has disrupted Azure, Microsoft 365, Xbox, and Minecraft worldwide after a configuration failure, with services now gradually recovering...
CVE-2025-58189 ALPN negotiation error contains attacker controlled information in crypto/tls
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...
CVE-2025-58189 ALPN negotiation error contains attacker controlled information in crypto/tls
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...
CVE-2025-58189 ALPN negotiation error contains attacker controlled information in crypto/tls
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...
GO-2025-4008 ALPN negotiation error contains attacker controlled information in crypto/tls
When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...
EUVD-2025-36703
Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...
SUSE-SU-2025:3856-1 Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed a buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...
Security update for strongswan
This update for strongswan fixes the following issues: CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...
