vLLM 安全漏洞

vLLM is a high throughput and memory efficient inference and service engine for LLM from vLLM open source. A security vulnerability exists in vLLM that stems from a caching mechanism in the outlines library that could lead to a denial of service by running out of file system space...

CLSA-2025-1742319829 Fix of 27 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-52522 - net: fix possible store tearing in neighperiodicwork CVE-url: https://ubuntu.com/security/CVE-2024-40911 - wifi: cfg80211: Lock wiphy in cfg80211getstation CVE-url: https://ubuntu.com/security/CVE-2024-43863 - drm/vmwgfx: Fix a deadlock in dma...

CVE-2025-0694

Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access...

CVE-2025-0694 CODESYS Control V3 removable media path traversal

Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access...

CVE-2025-0694

CVE-2025-0694 affects CODESYS Control: insufficient path validation leads to a path traversal flaw that can grant a low-privileged attacker with physical access full filesystem access. The vulnerability is described across multiple feeds (NVD, Red Hat, CVE list) as a removable-media/path traversa...

CVE-2025-0694 CODESYS Control V3 removable media path traversal

Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access...

filesystem bug fix and enhancement update

An update is available for filesystem. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...

Path Traversal

Mock API configuration is vulnerable to Path Traversal. The vulnerability is due to improper handling of user input in templating features, which allows attackers to manipulate file paths and access arbitrary files on the mock server filesystem...

fs/proc: fix softlockup in __read_vmcore (part 2)

...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-49080: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace bsc1238033. CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization guest/host mode behind...

ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv

...

usb: gadget: f_fs: Remove WARN_ON in functionfs_bind

...

CVE-2025-27101 Broken Access Control in Opal filesystem's copy functionality exposes all user data

Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, when copying any parent directory to a folder in the /temp/ directory, all files in that parent directory are copied, including files which the user should not have access to. All users of t...

CVE-2025-27101 Broken Access Control in Opal filesystem's copy functionality exposes all user data

Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, when copying any parent directory to a folder in the /temp/ directory, all files in that parent directory are copied, including files which the user should not have access to. All users of t...

USN-7332-2 linux-kvm vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

USN-7332-2: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

CVE-2025-27397

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions V4.0. Affected devices do not properly limit user controlled paths to which logs are written and from where they are read. This could allow an authenticated highly-privileged remote attacker to read and write...

CVE-2025-27398

CVE-2025-27398 affects Siemens SCALANCE LPE9403 (6GK5998-3GS00-2AC2) prior to version 4.0. The issue is an OS command injection where user-controlled log paths are not properly neutralized, enabling an authenticated, highly-privileged attacker to run a limited set of binaries already present on t...

kernel: can: bcm: Fix UAF in bcm_proc_show()

A flaw was found in the Linux kernel's Controller Area Network CAN Broadcast Manager BCM module. A local attacker with low privileges could exploit a use-after-free vulnerability in the bcmprocshow function. This occurs because the bcmop object is freed before its corresponding procfs entry is...

kernel: can: bcm: Fix UAF in bcm_proc_show()

A flaw was found in the Linux kernel's Controller Area Network CAN Broadcast Manager BCM module. A local attacker with low privileges could exploit a use-after-free vulnerability in the bcmprocshow function. This occurs because the bcmop object is freed before its corresponding procfs entry is...