CVE-2022-50720 x86/apic: Don't disable x2APIC if locked

In the Linux kernel, the following vulnerability has been resolved: x86/apic: Don't disable x2APIC if locked The APIC supports two modes, legacy APIC or xAPIC, and Extended APIC or x2APIC. X2APIC mode is mostly compatible with legacy APIC, but it disables the memory-mapped APIC interface in favor...

CVE-2023-54007

In the Linux kernel, the following vulnerability has been resolved: vmcihost: fix a race condition in vmcihostpoll causing GPF During fuzzing, a general protection fault is observed in vmcihostpoll. general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 1 PREEMPT SM...

CVE-2023-54007

In the Linux kernel, the following vulnerability has been resolved: vmcihost: fix a race condition in vmcihostpoll causing GPF During fuzzing, a general protection fault is observed in vmcihostpoll. general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 1 PREEMPT SM...

UBUNTU-CVE-2023-54007

In the Linux kernel, the following vulnerability has been resolved: vmcihost: fix a race condition in vmcihostpoll causing GPF During fuzzing, a general protection fault is observed in vmcihostpoll. general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 1 PREEMPT SM...

CVE-2023-54007 vmci_host: fix a race condition in vmci_host_poll() causing GPF

In the Linux kernel, the following vulnerability has been resolved: vmcihost: fix a race condition in vmcihostpoll causing GPF During fuzzing, a general protection fault is observed in vmcihostpoll. general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 1 PREEMPT SM...

CVE-2023-54007

CVE-2023-54007: Linux kernel vulnerability in vmci_host_poll() where a race between reading vmci_host_dev->context and vmci_host_dev->ct_type can read an uninitialized context, causing a general protection fault. The fix reads vmci_host_dev->context after ct_type is checked to ensure ini...

CVE-2023-54007 vmci_host: fix a race condition in vmci_host_poll() causing GPF

In the Linux kernel, the following vulnerability has been resolved: vmcihost: fix a race condition in vmcihostpoll causing GPF During fuzzing, a general protection fault is observed in vmcihostpoll. general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 1 PREEMPT SM...

PT-2025-52989

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc6-btrfs-next-134+ Description The Linux kernel contains a flaw in the btrfs file system related to race conditions when deleting quota roots from the dirty cow roots list. Specifically, when disabling...

OPENSUSE-SU-2025:15843-1 buildah-1.42.2-1.1 on GA media

These are all security issues fixed in the buildah-1.42.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-52964

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a race condition within the vmci host poll function that can lead to a general protection fault GPF. This issue occurs due to non-atomic reads of vmci host...

python315-3.15.0~a3-1.1 on GA media (moderate)

python315-3.15.0a3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15840-1 Rating: moderate Cross-References: CVE-2025-12084 CVE-2025-13836 CVE-2025-13837 CVSS scores: CVE-2025-12084 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-12084 SUSE : 6.3...

OPENSUSE-SU-2025:15841-1 zk-0.15.2-1.1 on GA media

These are all security issues fixed in the zk-0.15.2-1.1 package on the GA media of openSUSE Tumbleweed...

MozillaFirefox-146.0.1-1.1 on GA media (moderate)

MozillaFirefox-146.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15833-1 Rating: moderate Cross-References: CVE-2025-14860 CVE-2025-14861 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed i...

OPENSUSE-SU-2025:15832-1 coredns-for-k8s1.35-1.13.1-2.1 on GA media

These are all security issues fixed in the coredns-for-k8s1.35-1.13.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15830-1 alloy-1.12.0-2.1 on GA media

These are all security issues fixed in the alloy-1.12.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-47323 Integer Overflow or Wraparound in Audio

Memory corruption while routing GPR packets between user and root when handling large data packet...

CVE-2025-47323

CVE-2025-47323 describes memory corruption when routing GPR packets between user and root space, in Qualcomm embedded platform firmware. Red Hat, NVD, CVE List and vuln enrichment entries all cite memory corruption on handling large data packets as the issue, with several sources also noting a re...

OPENSUSE-SU-2025:15826-1 coredns-for-k8s1.34-1.12.1-2.1 on GA media

These are all security issues fixed in the coredns-for-k8s1.34-1.12.1-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-66133

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through = 4.0.7...

kernel: fs: fix UAF/GPF bug in nilfs_mdt_destroy

In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if securityinodealloc fails, which causes inode-iprivate uninitialized. Then nilfsismetadatafileinode returns true and nilfsfreeinode...