RLSA-2025:22387 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: nfsd: handle getclientlocked failure in nfsd4setclientidconfirm CVE-2025-38724 kernel: smb: client: fix race with concurrent opens...

kernel security update

An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2025-29864

Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29...

PT-2025-49080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The mlx5 irq alloc function in the Linux kernel could inadvertently free the entire rmap, leading to a crash when request irq fails due to exhausted IRQ vectors. This issue occurs when...

The vulnerabilities of the bpf and arm64 components of the Linux operating system, which allow a hacker to trigger a service failure

The vulnerability of the bpf and arm64 components of the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability in the Linux operating system’s component fs/hfsplus/extents.c allows a hacker to trigger a service failure.

The vulnerability of the fs/hfsplus/extents.c component in the Linux operating system is related to insufficient blocking. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the efivarfs component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the efivarfs component in the Linux operating system is related to incorrect initialization of the resource. Exploiting this vulnerability allows an attacker to cause a service failure...

RockyLinux 9 : kernel (RLSA-2025:22405)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:22405 advisory. kernel: nfsd: handle getclientlocked failure in nfsd4setclientidconfirm CVE-2025-38724 kernel: wifi: cfg80211: fix use-after-free in cmpbss CVE-2025-398...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel is related to insufficient blocking measures. Exploiting this vulnerability allows an attacker to cause a service failure...

PT-2025-49022

Name of the Vulnerable Software and Affected Versions XunRuiCMS versions up to 4.7.1 Description A security flaw exists in XunRuiCMS, specifically within the Email Setting Handler component. The issue involves server-side request forgery, potentially allowing remote exploitation. The flaw is...

Linux Distros Unpatched Vulnerability : CVE-2025-40250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: Clean up only new IRQ glue on requestirq failure The mlx5irqalloc function can inadvertently free the entire rmap and end up in a crash1 when the othe...

Oracle Linux 8 : edk2 (ELSA-2025-20669)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20669 advisory. - EDK2: EDK2 contains a vulnerability in BIOS where an attacker may cause Protection Mechanism Failure by local access Orabug: 38381983 CVE-2025-3770 ...

The vulnerability in the net/netfilter/nf_bpf_link.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the net/netfilter/nfbpflink.c component in the Linux operating system is related to insufficient blocking. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the quirks component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the quirks component of the Linux operating system’s kernel is related to a violation of expected behavior. Exploiting this vulnerability allows an attacker to cause a service failure...

PT-2025-49051

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel driver allocates memory for sensor data using devm kzalloc, but lacks a check to ensure the allocation was successful. If memory allocation fails, attempting to...

PT-2025-49055

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the mm/damon/sysfs interface. This interface dynamically allocates a damon ctx object for testing the validity of inputs for online DAMON...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrectly removing an entire rmap when cleaning up a failed IRQ allocation, which could lead to a crash...

Linux Distros Unpatched Vulnerability : CVE-2025-40256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: also call xfrmstatedeletetunnel at destroy time for states that were never added In commit b441cf3f8c4b xfrm: delete x-tunnel as we delete x, I missed the...

CVE-2025-29864

Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29...

CVE-2025-29864

ESTsoft ALZip on Windows (versions 12.01 up to 12.29 exclusive) is affected by a Protection Mechanism Failure that allows bypassing the SmartScreen protection. The vulnerability is described consistently across multiple sources (NVD, Red Hat, CNNVD, EUVD, CIRCL, etc.) as a SmartScreen bypass due ...