31 matches found
EUVD-2022-54680
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix combination of jit blinding and pointers to bpf subprogs. The combination of jit blinding and pointers to bpf subprogs causes: 36.989548 BUG: unable to handle page fault for address: 0000000100000001 36.990342 PF:...
EUVD-2025-22686
Malicious code in bioql PyPI...
EUVD-2025-20964
Malicious code in bioql PyPI...
CVE-2025-39716
In the Linux kernel, the following vulnerability has been resolved: parisc: Revise getuser to probe user read access Because of the way read access support is implemented, read access interruptions are only triggered at privilege levels 2 and 3. The kernel executes at privilege level 0, so getuse...
CVE-2025-39716 parisc: Revise __get_user() to probe user read access
In the Linux kernel, the following vulnerability has been resolved: parisc: Revise getuser to probe user read access Because of the way read access support is implemented, read access interruptions are only triggered at privilege levels 2 and 3. The kernel executes at privilege level 0, so getuse...
Linux Distros Unpatched Vulnerability : CVE-2022-49905
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible leaked pernet namespace in smcinit In smcinit,...
CVE-2025-38461
In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport TOCTOU Transport assignment may race with module unload. Protect newtransport from becoming a stale pointer. This also takes care of an insecure call in vsockuselocaltransport; add a lockdep assert. BUG: unab...
CVE-2025-38355 drm/xe: Process deferred GGTT node removals on device unwind
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Process deferred GGTT node removals on device unwind While we are indirectly draining our dedicated workqueue ggtt-wq that we use to complete asynchronous removal of some GGTT nodes, this happends as part of the managed-d...
CVE-2025-38284
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: configure manual DAC mode via PCI config API only To support 36-bit DMA, configure chip proprietary bit via PCI config API or chip DBI interface. However, the PCI device mmap isn't set yet and the DBI is also...
CVE-2022-50101
In the Linux kernel, the following vulnerability has been resolved: video: fbdev: vt8623fb: Check the size of screen before memsetio In the function vt8623fbsetpar, the value of 'screensize' is calculated by the user input. If the user provides the improper value, the value of 'screensize' may...
PT-2025-26025 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified, specifically in the arkfb driver. The issue arises in the arkfb set par function, where the screen size value is calculated bas...
CVE-2022-49905
CVE-2022-49905: In the Linux kernel net/smc, smc_init() registers pernet subsystems without proper error handling, risking leaked pernet namespace. If register_pernet_subsys(&smc_net_stat_ops) or smc_nl_init() fails, &smc_net_stat_ops might not be reverted, leaving wild ops in the subsystem linke...
Linux Distros Unpatched Vulnerability : CVE-2024-35832
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bcachefs: kvfree bchfs::snapshots in bch2fssnapshotsexit bchfs::snapshots is allocated by kvzalloc in snapshottmut. It should be freed by kvfree not kfree. Or...
Linux Distros Unpatched Vulnerability : CVE-2024-44975
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: fix panic caused by partcmdupdate We find a bug as below: BUG: unable to hand...
Linux Distros Unpatched Vulnerability : CVE-2022-49552
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix combination of jit blinding and pointers to bpf subprogs. The combination of jit blinding and pointers to bpf subprogs causes: 36.989548 BUG: unable to...
CVE-2022-49444
In the Linux kernel, the following vulnerability has been resolved: module: fix eshstrndx.shsize=0 OOB access It is trivial to craft a module to trigger OOB access in this line: if info-secstringsstrhdr-shsize - 1 != '\0' BUG: unable to handle page fault for address: ffffc90000aa0fff PGD 10000006...
CVE-2024-22525
dnspod-sr 0dfbd37 contains a SEGV...
CVE-2024-56768
CVE-2024-56768 (Linux kernel) : On x86-64, calling bpf_get_smp_processor_id() in builds with CONFIG_SMP disabled can trigger a page fault due to unavailable pcpu_hot. The fix in the patch inline returns 0 for the !CONFIG_SMP path, preventing the fault. References point to the kernel stable histor...
CVE-2024-56768 bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpfgetsmpprocessorid on !CONFIGSMP On x86-64 calling bpfgetsmpprocessorid in a kernel with CONFIGSMP disabled can trigger the following bug, as pcpuhot is unavailable: 8.471774 BUG: unable to handle page fault for addres...
PT-2025-3315 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to the fixed version Description: A bug in the Linux kernel has been resolved, specifically in the bpf get smp processor id function when CONFIG SMP is disabled. On x86-64, calling this function can trigger an erro...