The vulnerability of the s390 kernel component of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the s390 kernel component of the Linux operating system is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ocfs2_delete_osb() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ocfs2deleteosb function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the arch_syncKernel_mappings() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the archsynckernelmappings function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __cifs_sfu_make_node() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cifssfumakenode function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __iodyn_find_io_region() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the iodynfindioregion function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

JetBrains ReSharper < 2025.2.4 Local Privilege Escalation (CVE-2025-64456)

The version of JetBrains ReSharper installed on the remote host is prior to 2025.2.4, and is, therefore, affected by a local privilege escalation vulnerability: - In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation. CVE-2025-644...

The vulnerability of the walk_systemRamResRev() function in the kernel/resource.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the walksystemRamResRev function in the kernel/resource.c module of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the alloc_dev() function in the drivers/md/dm.c module – The driver for supporting multiple devices (RAID and LVM) in the Linux kernel allows a hacker to cause service failure.

Vulnerability of the allocdev function in the drivers/md/dm.c module – The driver for supporting multiple devices such as RAID and LVM in the Linux operating system relies on pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the check_mul_overflow() function in the netfilter component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the checkmuloverflow function in the netfilter component of the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the audit_compare_dname_path() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the auditcomparednamepath function in the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the set_track_prepare() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the settrackprepare function in the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

The vulnerability of the strscpy() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the strscpy function in the Linux operating system’s kernel is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the batadv_nc_skb_decode_packet() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the batadvncskbdecodepacket function in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-40181

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Force legacy PCI hole to UC when overriding MTRRs for TDX/SNP When running as an SNP or TDX guest under KVM, force the legacy PCI hole, i.e. memory between Top of Lower Usable DRAM and 4GiB, to be mapped as UC via a forc...

GHSA-PM3X-JRHH-QCR7 SpiceDB WriteRelationships fails silently if payload is too big

Impact Users who 1. use the exclusion operator somewhere in their authorization schema 1. have configured their SpiceDB server such that --write-relationships-max-updates-per-call is bigger than 6500 1. issue calls to WriteRelationships with a large enough number of updates that cause the payload...

SpiceDB WriteRelationships fails silently if payload is too big

Impact Users who 1. use the exclusion operator somewhere in their authorization schema 1. have configured their SpiceDB server such that --write-relationships-max-updates-per-call is bigger than 6500 1. issue calls to WriteRelationships with a large enough number of updates that cause the payload...

EUVD-2022-55680

ZenTao Biz 6.5, ZenTao Max 3.0, ZenTao Open Source Edition 16.5, and ZenTao Open Source Edition 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/user-login.html before using it in a database...

CVE-2025-40144

No description is available for this CVE...

CVE-2025-40125

In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject stateinsysfs before deleting in blkmqunregisterhctx In blkmqupdatenrhwqueues the return value of blkmqsysfsregisterhctxs is not checked. If sysfs creation for hctx fails, later changing the number of hwqueue...

CVE-2025-40151

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: No support of struct argument in trampoline programs The current implementation does not support struct argument. This causes a oops when running bpf selftest: $ ./testprogs -a tracingstruct Oops1: CPU -1 Unable t...