Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from memory allocation failures that are not properly cleaned up, potentially leading to a memory leak...

CVE-2025-68338

In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Don't free uninitialized kszirq If something goes wrong at setup, kszirqfree can be called on uninitialized kszirq for example when kszptpirqsetup fails. It leads to freeing uninitialized IRQ numbers and/or...

UBUNTU-CVE-2025-68337

In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bugon in jbd2journalgetcreateaccess when file system corrupted There's issue when file system corrupted: ------------ cut here ------------ kernel BUG at fs/jbd2/transaction.c:1289! Oops: invalid opcode: 0000 1 SMP...

A Practical Solution to Systematically Monitor Inconsistencies in SBOM-Based Vulnerability Scanners

Software Bill of Materials SBOM provides new opportunities for automated vulnerability identification in software products. While the industry is adopting SBOM-based Vulnerability Scanning SVS to identify vulnerabilities, we increasingly observe inconsistencies and unexpected behavior, that resul...

SUSE CVE-2025-68290

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST...

EulerOS Virtualization 2.13.1 : libssh (EulerOS-SA-2025-2549)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to...

EulerOS Virtualization 2.13.0 : libssh (EulerOS-SA-2025-2584)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to...

The vulnerability of the 5G NRMM Packet Handler component in Samsung’s Exynos 2100, Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, Exynos 1480, Exynos 9110, and Exynos Modem 5123 processors allows a hacker to trigger a service failure.

The vulnerability of the 5G NRMM Packet Handler component in Samsung’s Exynos 2100, Exynos 1280, Exynos 2200, Exynos 1330, Exynos 1380, Exynos 1480, Exynos 9110, and Exynos Modem 5123 processors is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious...

The vulnerability of the software for creating and managing graphical user interfaces for Rockwell Automation FactoryTalk View Machine Edition devices lies in improper restrictions on path names to restricted directories. This allows attackers to trigger service failures.

The vulnerability of the software for creating and managing graphical user interfaces on Rockwell Automation FactoryTalk View Machine Edition industrial devices is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a...

The vulnerability of the Qsync Central file synchronization application, related to unlimited distribution of resources, allows a hacker to cause a service failure.

The vulnerability of the Qsync Central file synchronization application is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the Qsync Central file synchronization application, related to unlimited distribution of resources, allows a hacker to cause a service failure.

The vulnerability of the Qsync Central file synchronization application is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a remote attacker to cause service failures...

CVE-2025-68290

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST...

UBUNTU-CVE-2025-68290

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST...

The vulnerability of the Markdown-it component on the SAPUI development user interface platform allows a attacker to trigger a service failure.

The vulnerability of the Markdown-it component of the SAPUI development user interface platform is related to asymmetric resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Toolbar component in the Google Chrome browser allows a hacker to disclose protected information and cause a service failure.

The vulnerability of the Toolbar component in Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information and cause service failures...

The vulnerability of embedded software developed by Qualcomm, related to uncontrolled implementation of certain certifications, allows attackers to trigger service failures.

The vulnerability of embedded Qualcomm software is related to an uncontrolled and exploitable specification. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerability of the ivpu_ipc_receive() function in the drivers/accel/ivpu/ivpu_ipc.c module – This driver for supporting the Intel NPU core in the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the ivpuipcreceive function in the drivers/accel/ivpu/ivpuipc.c module – The Linux kernel’s Intel NPU driver support mechanism is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of the npm React Router package, related to insufficient handling of exceptional states, allows a violator to trigger a service failure.

The vulnerability of the npm React Router package is related to insufficient handling of exceptional states. Exploiting this vulnerability may allow a remote attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2025-68290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper handling of transfer failures, which could lead to performance degradation...