The vulnerability of the Linux operating system’s kernel driver allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel driver is related to the disclosure of information. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability in the driver net/usb/asix_devices.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/usb/asixdevices.c driver of the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Venus kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the Venus kernel component in the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability in the net/packet/af_packet.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/packet/afpacket.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Xilinx kernel component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the Xilinx kernel component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the perf/core component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the perf/core component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the slub.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the slub.c component in the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability allows a perpetrator to cause a service failure...

The vulnerability of the mt_report_fixup() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mtreportfixup function in the Linux operating system is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability allows an attacker to trigger a service failure through the use of a specially connected HID device...

The vulnerability of the destroy_args() function in the mm/debug_vm_pgtable.c component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the destroyargs function in the mm/debugvmpgtable.c component of the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability in the acpi/pfr_update.c driver of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the acpi/pfrupdate.c driver of the Linux operating system is related to the comparison using incorrect factors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability in the `sound/usb/validate.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the sound/usb/validate.c component of the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability in the driver/regulator/core.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the drivers/regulator/core.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the MySQL Server component of the database management system allows a hacker to cause a service failure.

The vulnerability of the MySQL Server database management system component lies in its unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

RLSA-2025:22854 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: Fix oops due to uninitialised variable CVE-2025-38737 kernel: can: j1939: implement NETDEVUNREGISTER notification handler CVE-2025-39925 kernel: Bluetooth: hcievent: Fix UAF in...

Sensitive Information Exposure

Jenkins ByteGuard Build Actions Plugin is vulnerable to sensitive information exposure. The vulnerability is due to improper masking of API tokens on the job configuration form, which allows an attacker to observe and capture these tokens...

CVE-2025-12834

The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failuremessage' parameter in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

BIT-MONGODB-2025-13644 MongoDB may be susceptible to Invariant Failure due to batched delete

MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSize. This issue affects MongoDB Server...

CVE-2025-12834

The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failuremessage' parameter in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2025-12834 Accept Stripe Payments Using Contact Form 7 <= 3.1 - Reflected Cross-Site Scripting via failure_message

The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failuremessage' parameter in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2025-12834

CVE-2025-12834 affects the WordPress plugin “Accept Stripe Payments Using Contact Form 7” and is due to insufficient input sanitization and output escaping in the failure_message parameter. The issue enables a Reflected XSS by unauthenticated attackers, who must lure a user to perform an action (...