PT-2025-52754

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to DSA Distributed Switch Architecture and Microchip network devices. Specifically, the ksz irq free function may be called on an uninitialized...

UBUNTU-CVE-2025-68337

In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bugon in jbd2journalgetcreateaccess when file system corrupted There's issue when file system corrupted: ------------ cut here ------------ kernel BUG at fs/jbd2/transaction.c:1289! Oops: invalid opcode: 0000 1 SMP...

A Practical Solution to Systematically Monitor Inconsistencies in SBOM-Based Vulnerability Scanners

Software Bill of Materials SBOM provides new opportunities for automated vulnerability identification in software products. While the industry is adopting SBOM-based Vulnerability Scanning SVS to identify vulnerabilities, we increasingly observe inconsistencies and unexpected behavior, that resul...

SUSE CVE-2025-68290

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST...

EulerOS Virtualization 2.13.0 : libssh (EulerOS-SA-2025-2584)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to...

EulerOS Virtualization 2.13.1 : libssh (EulerOS-SA-2025-2549)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to...

CVE-2025-68290

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST...

UBUNTU-CVE-2025-68290

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper handling of transfer failures, which could lead to performance degradation...

Linux Distros Unpatched Vulnerability : CVE-2025-68290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures...

CVE-2025-65176

Dynatrace OneAgent (versions before 1.325.47) is vulnerable: when accessing a remote network share and encountering STATUS_LOGON_FAILURE, the agent retrieves all user tokens on the machine and impersonates them to repeatedly access the share, enabling potential NTLM relay attacks. Affected compon...

The vulnerability of the `comedi/drivers/pcl726.c` component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the comedi/drivers/pcl726.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the arm64/entry component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the arm64/entry component in the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Linux operating system’s kernel, related to reading beyond the buffer data boundary, allows an attacker to access confidential data and also cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

The vulnerability of the ixgbe_ethtool.c component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ixgbeethtool.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the mm/userfaultfd component in the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the mm/userfaultfd component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability in the jfs/jfs_dmap.c component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the jfs/jfsdmap.c component in the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the pinctrl-msm component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pinctrl-msm component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of Linux Astra Modules, related to insufficient data authentication, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Linux Astra Modules’ kernel modules is related to insufficient verification of data authenticity. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the inode.c component of the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the inode.c component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...