scsi: ufs: qcom: Only free platform MSIs when ESI is enabled

...

f2fs: fix to wait dio completion

...

f2fs: fix KMSAN uninit-value in extent_info usage

...

scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set

...

f2fs: fix to avoid out-of-boundary access in dnode page

...

f2fs: fix to avoid panic once fallocation fails for pinfile

...

Linux Distros Unpatched Vulnerability : CVE-2019-7582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory...

scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()

...

f2fs: fix to truncate meta inode pages forcely

...

f2fs: avoid infinite loop to flush node pages

...

f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC

...

scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()

...

Linux Distros Unpatched Vulnerability : CVE-2010-4208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows...

Linux Distros Unpatched Vulnerability : CVE-2013-7341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, a...

Linux Distros Unpatched Vulnerability : CVE-2018-6315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The outputSWFTEXTRECORD function util/outputscript.c in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may...

Linux Distros Unpatched Vulnerability : CVE-2016-9827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers to cause a denial of service buffer over-read via a crafted SWF...

Linux Distros Unpatched Vulnerability : CVE-2010-4209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows...

Flashrom to Hexedit to Root: DEF CON 33 IoT Village Exercise

Each year at DEF CON’s IoT Village, Rapid7 researchers showcase their skills in penetration testing, hardware hacking, and more. At DEF CON 33, Principal Security Researcher, IoT, Deral Heiland took attendees step by step through a brand-new, hands-on exercise that pushed past last year’s lessons...

WordPress Easy Flash Embed plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Easy Flash Embed versions = 1.0...

SUSE CVE-2025-38677

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: dumpstack lib/dumpstack.c:94 inline dumpstacklvl+0x1c1/0x2a0 lib/dumpstack.c:120 printaddressdescription mm/kasan/report.c:378 inline...