16582 matches found
CVE-2025-22033 arm64: Don't call NULL in do_compat_alignment_fixup()
In the Linux kernel, the following vulnerability has been resolved: arm64: Don't call NULL in docompatalignmentfixup doalignmentt32tohandler only fixes up alignment faults for specific instructions; it returns NULL otherwise e.g. LDREX. When that's the case, signal to the caller that it needs to...
CVE-2025-22033 arm64: Don't call NULL in do_compat_alignment_fixup()
In the Linux kernel, the following vulnerability has been resolved: arm64: Don't call NULL in docompatalignmentfixup doalignmentt32tohandler only fixes up alignment faults for specific instructions; it returns NULL otherwise e.g. LDREX. When that's the case, signal to the caller that it needs to...
AZL-62762 CVE-2025-22022 affecting package kernel for versions less than 6.6.121.1-1
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints Two clearly different specimens of NEC uPD720200 one with start/stop bug, one without were seen to cause IOMMU faults after some Missed Service Errors. Faulting address ...
UBUNTU-CVE-2025-22022
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints Two clearly different specimens of NEC uPD720200 one with start/stop bug, one without were seen to cause IOMMU faults after some Missed Service Errors. Faulting address ...
CVE-2025-22018 atm: Fix NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved: atm: Fix NULL pointer dereference When MPOAcacheimposrcvd receives the msg, it can trigger Null Pointer Dereference Vulnerability if both entry and holdingtime are NULL. Because there is only for the situation where entry is NULL...
CVE-2025-22018
CVE-2025-22018 affects the Linux kernel ATM MPOA path. A NULL pointer dereference can occur in MPOA_cache_impos_rcvd() when both entry and holding_time are NULL, leading to a crash (KASAN/GPF observed in logs). The issue has been fixed in upstream kernels and is addressed in vendor updates (examp...
The vulnerability of the hmm_range_fault() function in the drivers/gpu/drm/xe/xe_hmm.c kernel module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the hmmrangefault function in the drivers/gpu/drm/xe/xehmm.c kernel module of the Linux operating system is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-22027: Concurrent Execution using Shared Resource with Improper Synchronization
In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callback Syzkaller has reported a general protection fault at function irraweventstorewithfilter. This crash is caused by a NULL pointer dereference of dev-raw...
CVE-2025-1566: Improper Protection against Electromagnetic Fault Injection (EM-FI)
DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions...
CVE-2025-22022: Out-of-bounds Write
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints Two clearly different specimens of NEC uPD720200 one with start/stop bug, one without were seen to cause IOMMU faults after some Missed Service Errors. Faulting address ...
Security Bulletin: IBM Integration Bus for z/OS is vulnerable to memory leaking, segmentation fault or heap-use-after-free due to Eclipse Mosquitto (CVE-2024-8376)
Summary IBM Integration Bus for z/OS is vulnerable to memory leaking, segmentation fault or heap-use-after-free due to Eclipse Mosquitto. Vulnerability Details CVEID:CVE-2024-8376 DESCRIPTION: In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault o...
KLA82680 Multiple vulnerabilities in Oracle VirtualBox
Denial of service vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerability to cause denial of service. Original advisories Oracle Virtualization Risk Matrix Exploitation Public exploits exist for this vulnerability. CVE list CVE-2025-30712 critical...
PT-2025-22218
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A vulnerability in the Linux kernel has been resolved, related to KVM Kernel-based Virtual Machine and SVM Secure Virtual Machine. The issue occurs when a triple fault happens in...
OESA-2025-1406 transfig security update
The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Security Fixes:...
EulerOS 2.0 SP11 : vim (EulerOS-SA-2025-1379)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does no...
EulerOS 2.0 SP11 : vim (EulerOS-SA-2025-1380)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does no...
hdf5: multiple CVEs
HDF5 Library through 1.14.3 has a SEGV in H5VMmemcpyvv in H5VM.c...
CVE-2025-3359
A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment...
