The vulnerability of the memfd_pin_folios() function in the mm/gup.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the memfdpinfolios function in the mm/gup.c module of the Linux kernel’s memory management subsystem leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of GNUPlot’s plotting software, related to the manipulation of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of GNUPlot’s graph creation software relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the console-based graphic editor ImageMagick, related to integer overflow, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability in the driver/gpu/drm/amd/display/dc/dml2/dml2_core/dml2_core_shared_types.h file of the Linux operating system’s kernel, which allows a hacker to trigger a service failure. This vulnerability relates to the driver that supports AMD graphics cards’ Direct Rendering Infrastructure (DRI) in Linux.

The vulnerability in the drivers/gpu/drm/amd/display/dc/dml2/dml2core/dml2coresharedtypes.h file relates to the driver that supports AMD’s Linux operating system graphics cards’ Direct Rendering Infrastructure DRI. This vulnerability stems from allowing an operation to go beyond the buffer...

Huawei EulerOS: Security Advisory for EDK2 (EulerOS-SA-2025-2571)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-37472

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm-verity component where the verity fec ctr function does not correctly handle failures during calls to dm bufio client create. If these calls fail, dm bufio clie...

The vulnerability of GNUPlot’s plotting software, related to the manipulation of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of GNUPlot’s graph creation software relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function dce11_pplib_apply_display_requirements() in the driver drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c file, a driver for supporting AMD Linux operating system-based graphics cards’ Direct Rendering Infrastructure (DRI), allows a malicious actor to trigger a service failure.

The vulnerability of the dce11pplibapplydisplayrequirements function in the drivers/gpu/drm/amd/display/dc/clkmgr/dce110/dce110clkmgr.c file, a driver for AMD Direct Rendering Infrastructure DRI graphics cards for Linux operating systems, is related to the use of pointer manipulation. Exploiting...

CVE-2025-13321

Mattermost Desktop App versions 6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the users system to gain access to potentially sensitive information via reading the application logs...

CVE-2025-61736

Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires...

most: usb: fix double free on late probe failure

...

CVE-2025-27063

Memory corruption during video playback when video session open fails with time out error...

CVE-2025-14303

Certain motherboard models developed by MSI has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are...

CVE-2025-14304

Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory...

The vulnerability in the kernel module drivers/gpu/drm/amd/display/dc/hwss/dce110/dce110HWSeq.c of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/gpu/drm/amd/display/dc/hwss/dce110/dce110hwseq.c kernel of the Linux operating system is related to the ability to access a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the QEMU hardware emulation software, related to the use of memory after it is freed, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

EulerOS Virtualization 2.13.0 : EDK2 (EulerOS-SA-2025-2571)

According to the versions of the EDK2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : EDK2 contains a vulnerability in BIOS where an attacker may cause 'Protection Mechanism Failure' by local access. Successful...

EulerOS Virtualization 2.13.1 : EDK2 (EulerOS-SA-2025-2536)

According to the versions of the EDK2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : EDK2 contains a vulnerability in BIOS where an attacker may cause 'Protection Mechanism Failure' by local access. Successful...

The vulnerability of the crypto/af_alg.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the crypto/afalg.c component in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the do_secure_storage_access() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dosecurestorageaccess function arch/s390/mm/fault.c in the Linux operating system kernel is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...