The vulnerability of the VMM component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the VMM component in the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux - уязвимость в tomcat9

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or...

Windows BitLocker Security Feature Bypass Vulnerability

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...

The vulnerability of the __block_write_full_page() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the blockwritefullpage function in the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the recvmsg() function in the mptcp component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the recvmsg function in the mptcp component of the Linux operating system is related to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the kernel’s include/media/v4l2-mem2mem.h module allows a hacker to cause a service failure.

The vulnerability in the include/media/v4l2-mem2mem.h header file of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the tipc_link_proto_rcv() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tipclinkprotorcv function in the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

IGEL OS Use of a Key Past its Expiration Date Vulnerability

IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...

PT-2025-49053

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the SCMI debug subsystem. If the subsystem fails to initialize, the debug root may be missing, leading to a NULL descriptor. This condition is not...

Rockwell Automation Compact GuardLogix 5370 安全漏洞

The Rockwell Automation Compact GuardLogix 5370 is a secure programmable logic controller from Rockwell Automation, Inc. A security vulnerability exists in the Rockwell Automation Compact GuardLogix 5370 that originates from a failure when sending a specially crafted CIP unconnected explicit...

The vulnerability of the devlink_free() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the devlinkfree function in the Linux operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nla_policy() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the nlapolicy function in the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/scsi/mpt3sas/mpt3sas_base.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/scsi/mpt3sas/mpt3sasbase.c module of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the devfreq_dev_release() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the devfreqdevrelease function in the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

RHEL 9 : kernel (RHSA-2025:17958)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17958 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: usb: smsc75xx: Limit...

Linux Distros Unpatched Vulnerability : CVE-2025-39960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: gpiolib: acpi: initialize acpigpioinfo struct Since commit 7c010d463372 gpiolib: acpi: Make...

The vulnerability of the ufshcd_queuecommand() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ufshcdqueuecommand function in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2025-34084

Mattermost Desktop App versions = 5.13.0 fail to validate URLs external to the configured Mattermost servers, allowing an attacker on a server the user has configured to crash the user's application by sending the user a malformed URL...

CVE-2025-62174 Mastodon allows continued access after password reset via CLI

Mastodon is a free, open-source social network server based on ActivityPub. In Mastodon before 4.4.6, 4.3.14, and 4.2.27, when an administrator resets a user account's password via the command-line interface using bin/tootctl accounts modify --reset-password, active sessions and access tokens for...