DEBIAN-CVE-2023-52940

In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lrugenmigratemm assumes lrugenaddmm runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone cgroupcanfork cgroupprocswrite cgrouppostfork tasklock...

UBUNTU-CVE-2023-52940

In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lrugenmigratemm assumes lrugenaddmm runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone cgroupcanfork cgroupprocswrite cgrouppostfork tasklock...

CVE-2023-52940: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm: multi-gen LRU: fix crash during cgroup migration lrugenmigratemm assumes lrugenaddmm runs prior to itself. This isn't true for the following scenario: CPU 1 CPU 2 clone cgroupcanfork cgroupprocswrite cgrouppostfork tasklock...

Security Bulletin: IBM Security Guardium is affected by multiple OS level vulnerabilities

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID:CVE-2022-1941 DESCRIPTION: protobuf is vulnerable to a denial of service, caused by a parsing vulnerability for the MessageSet type in the ProtocolBuffers. By sending a specially crafted message with multiple...

PT-2025-18405

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between mhi unprepare from transfer and mhi queue buf functions. When a client driver uses mhi unprepare from transfer to quiesce incoming data during its teardow...

UBUNTU-CVE-2025-21831

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 commit 9d26d3a8f1b0 "PCI: Put PCIe ports into D3 during suspend" sets the policy that all PCIe ports are allowed to use D3. When the system is suspended if the port...

PT-2025-9279

Name of the Vulnerable Software and Affected Versions Codezips Gym Management System version 1.0 Description A critical issue was found in the Codezips Gym Management System, affecting some unknown functionality of the file /dashboard/admin/gen invoice.php. The manipulation of the id argument lea...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: kaf, certificate-transparency, petname, go-licenses, croc, slsa-verifier, helm-push, go-bindata, kubernetes-dashboard-web, kapp, sqlexporter, cert-manager-webhook-pdns, vertical-pod-autoscaler, sonobuoy, kpt, falco-exporter, neuvector-sigstore-interface,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: prometheus-operator, gosu, kaf, vexctl, php-fpmexporter, task, kubebuilder, petname, supercronic, docker-credential-acr-env, go-licenses, spark-operator, cni-plugins, crossplane-provider-azure, kubevela, slsa-verifier, cluster-proportional-autoscaler, grafana-operato...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: prometheus-operator, gosu, kaf, vexctl, php-fpmexporter, task, kubebuilder, petname, supercronic, docker-credential-acr-env, go-licenses, spark-operator, cni-plugins, crossplane-provider-azure, kubevela, slsa-verifier, cluster-proportional-autoscaler, grafana-operato...

GHSA-3WHM-J4XM-RV8X vulnerabilities

Vulnerabilities for packages: nri-kubernetes, kaf, task, crossplane-provider-aws-firehose, certificate-transparency, petname, protoc-gen-go, go-licenses, fulcio, crossplane-provider-azure-managedidentity, croc, slsa-verifier, fzf, cluster-proportional-autoscaler, go-bindata,...

CVE-2025-25605

Totolink X5000R V9.1.0u.6369B20230113 is vulnerable to command injection via the apcliwpsgenpincode function in mtkwifi.lua...

Vulnerabilities fixed in SonicWall SonicOS

Sonicwall has fixed vulnerabilities in SonicOS for Gen6 and Gen7 firewalls. The first vulnerability concerns a weak pseudo-random number generator in the SSLVPN CVE-2024-40762, allowing attackers to predict authentication tokens in some cases. CVE-2024-53704 concerns improper authentication in th...

PT-2025-14358

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hang issue in the kdump kernel has been resolved when running on Hyper-V Gen 2 VMs. The problem occurs when the hyperv fb driver moves the framebuffer to a different MMIO address due t...

HPESBHF04786 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7028: AMD System Management Mode (SMM) Callout Vulnerability, Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus server - Prior to v3.4010-04-2024 HPE ProLiant XL225n Gen10 Plus 1U Node - Prior to v3.4010-04-2024 HPE ProLiant XL645d Gen10 Plus Server - Prio...

HPESBHF04795 rev.1 - Certain HPE SimpliVity AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7027: AMD System Management Mode (SMM) Vulnerabilities, Local Arbitrary Code Execution Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 325 Gen10 - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v20250131 HPE SimpliVity 325 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSP v202501...

HPESBHF04782 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7027: AMD System Management Mode (SMM) Vulnerabilities, Local Arbitrary Code Execution Vulnerabilities

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL145 Gen11 - Prior to v1.3010-04-2024 HPE ProLiant DL325 Gen11 Server - Prior to v1.7009-06-2024 HPE ProLiant DL345 Gen11 Server - Prior to v1.7009-06-2024 HPE...

HPESBHF04779 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-01100, 2024.3 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX220n Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DX380 Gen10 Plus server - Prior to v2.2008-07-2024 HPE ProLiant DX360 Gen10 Plus server - Prior t...

CVE-2025-0015

A Use After Free vulnerability exists in the Arm Ltd Valhall GPU Kernel Driver and the Arm 5th Gen GPU Architecture Kernel Driver . This flaw allows a local non-privileged user process to perform improper GPU processing operations to gain access to memory that has already been freed. Affected ver...

PT-2025-3686

Name of the Vulnerable Software and Affected Versions Arm Ltd Bifrost GPU Kernel Driver versions r44p1, from r46p0 through r49p0, from r50p0 through r51p0 Arm Ltd Valhall GPU Kernel Driver versions r44p1, from r46p0 through r49p0, from r50p0 through r51p0 Arm Ltd Arm 5th Gen GPU Architecture Kern...