33547 matches found
mm: memory-failure: update ttu flag inside unmap_poisoned_folio
...
CVE-2025-60711
Protection mechanism failure in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Claude Code Can Debug Low-level Cryptography
Over the past few days I wrote a new Go implementation of ML-DSA, a post-quantum signature algorithm specified by NIST last summer. I livecoded it all over four days, finishing it on Thursday evening. Except… Verify was always rejecting valid signatures. $ bin/go test crypto/internal/fips140/mlds...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: smb: Logs an error when closeallcacheddirs fails Under low-memory conditions, closeallcacheddirs cannot move the entries to a separate list to send them to dput once the locks are dropped. This will result in an “Dentry still in...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: media: cxusb: No longer judges rbuf when the write fails syzbot reported a uninit-value in cxusbi2cxfer. Only when the write operation of usbbulkmsg in dvbusbgenericrw succeeds and rlen is greater than 0, the read operation of...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restored the context entry setup order for aliased devices. The commit 2031c469f816 “iommu/vt-d: Added support for static identity domains” changed the context entry setup during domain attachment from a set-and-check...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: The inode marked as bad after removing a file name fails. The reproducer uses a file0 on an ntfs3 file system with a corrupted ilink. When renaming a file, the inode of file0 is marked as bad because the file name canno...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: hisiaccvfiopci: fixed the XQE DMA address error. The DMA addresses of EQE and AEQE are incorrect after migration, resulting in failures in the guest kernel-mode encryption services. By comparing the definitions of hardware...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: trace/fgraph: The warning caused by the missing unregister notifier has been fixed. This warning was triggered during testing on v6.16: notifier Callback ftracesuspendnotifiercall is already registered WARNING: CPU: 2, PID: 86, i...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: iouring/futex: Ensure that iofutexwait properly cleans up in case of failure. The iofutexdata is allocated upfront and assigned to the iokiocb asyncdata field. However, the request is not marked with REQFASYNCDATA at that point...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: Fixed handling of hwpoisoned large folio entries in shrinkfoliolist. In shrinkfoliolist, the hwpoisoned folio might be a large folio, which cannot be handled by unmappoisonedfolio. For THP, trytounmapone must be called...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: btrfs: perform proper folio cleanup when cowfilerange fails BUG When testing with COW fixup marked as BUGON this involves the new pinuserpages change, which should not result in new out-of-band dirty pages, I encountered a crash...
thermal: core: call put_device() only after device_register() fails
...
The vulnerability of the user_cluster_connect() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the userclusterconnect function in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `open_by_handle_at()` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the openbyhandleat function in the Linux operating system’s kernel is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the copy_from_iter() and copy_to_iter() functions in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the copyfromiter and copytoiter functions in the Linux operating system is related to the lack of code checks for function return. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the drivers/iommu/intel/iommu.h module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/iommu/intel/iommu.h module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
EUVD-2025-37394
When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device. This vulnerability exists in Silicon Labs' Z-Wave PIR Sensor Reference design delivered as part of SiSDK v2025.6.0 and v2025.6.1...
