CVE-2025-39995

In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe The state-timer is a cyclic timer that schedules worki2cpoll and delayedworkenablehotplug, while rearming itself. Using timerdelete fails to guarantee...

DEBIAN-CVE-2025-39995

In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe The state-timer is a cyclic timer that schedules worki2cpoll and delayedworkenablehotplug, while rearming itself. Using timerdelete fails to guarantee...

UBUNTU-CVE-2025-39995

In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe The state-timer is a cyclic timer that schedules worki2cpoll and delayedworkenablehotplug, while rearming itself. Using timerdelete fails to guarantee...

CVE-2025-39995

CVE-2025-39995: Linux kernel vulnerability in media: i2c: tc358743 where use-after-free occurs due to an orphan timer and in-flight delayed_work during probe failure. The cyclic timer schedules work_i2c_poll and delayed_work_enable_hotplug and may reference tc358743_state after it is freed. A fix...

CVE-2025-39995 media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe

In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe The state-timer is a cyclic timer that schedules worki2cpoll and delayedworkenablehotplug, while rearming itself. Using timerdelete fails to guarantee...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

PT-2025-42349

Name of the Vulnerable Software and Affected Versions rSeries FIPS module affected versions not specified Description The rSeries FIPS module may fail to initialize when a user attempts initialization with a password containing special shell metacharacters. This issue affects the FIPS hardware...

The vulnerability of the Kubernetes cluster management software, related to improper validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the Kubernetes cluster management software is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure remotely...

The vulnerability of the pcie_link_state() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pcielinkstate function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

WordPress plugin Orion SMS OTP Verification 安全漏洞

WordPress Orion SMS OTP Verification plugin is an authentication plugin for WordPress that enables user verification by sending a one-time password OTP via text message SMS. An elevation of privilege vulnerability exists in the WordPress Orion SMS OTP Verification plugin, which can be exploited b...

PT-2025-46637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ASoC amd/sdw utils component where a NULL pointer dereference may occur if devm kasprintf fails during memory allocation. Specifically, a debu...

The vulnerabilities in the modules drivers/net/ethernet/intel/ice/ice_eswitch.c and drivers/net/ethernet/intel/ice/ice_main.c of the Linux operating system allow a hacker to cause a service failure.

The vulnerability in the modules drivers/net/ethernet/intel/ice/iceeswitch.c and drivers/net/ethernet/intel/ice/icemain.c of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the qrtr_recvmsg() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the qrtrrecvmsg function in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the pm_runtime_resume_and_get() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pmruntimeresumeandget function in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the VMM component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the VMM component in the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux - уязвимость в tomcat9

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or...

Windows BitLocker Security Feature Bypass Vulnerability

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

The vulnerability of the __block_write_full_page() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the blockwritefullpage function in the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...