CVE-2025-56381

ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the orderby and groupby parameters...

SUSE CVE-2023-53482

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix error unwind in iommugroupalloc If either iommugroupgratefile fails then the iommugroup is leaked. Destroy it on these error paths. Found by kselftest/iommu/iommufdfailnth...

SUSE CVE-2023-53503

In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4getgroupinfo to fail Previously, ext4getgroupinfo would treat an invalid group number as BUG, since in theory it should never happen. However, if a malicious attaker or fuzzer modifies the superblock via the block...

SUSE CVE-2025-59044

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau 0.9.x derives numeric GIDs for Entra ID groups from the group display name when himmelblau.conf idattrmap = name the default configuration. Because Microsoft Entra ID allows multiple groups with the same...

BIT-GITLAB-2025-7691 Privilege Defined With Unsafe Actions in GitLab

A privilege escalation issue has been discovered in GitLab EE affecting all versions from 16.6 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 that could have allowed a developer with specific group management permissions to escalate their privileges and obtain unauthorized access...

CVE-2023-53503

In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4getgroupinfo to fail Previously, ext4getgroupinfo would treat an invalid group number as BUG, since in theory it should never happen. However, if a malicious attaker or fuzzer modifies the superblock via the block...

CVE-2023-53482

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix error unwind in iommugroupalloc If either iommugroupgratefile fails then the iommugroup is leaked. Destroy it on these error paths. Found by kselftest/iommu/iommufdfailnth...

CVE-2023-53450

In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUGON in ext4mbreleasegrouppa If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the sfirstdatablock is set to a very large number, the calculation of the block group can underflow,...

UBUNTU-CVE-2023-53450

In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUGON in ext4mbreleasegrouppa If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the sfirstdatablock is set to a very large number, the calculation of the block group can underflow,...

UBUNTU-CVE-2023-53482

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix error unwind in iommugroupalloc If either iommugroupgratefile fails then the iommugroup is leaked. Destroy it on these error paths. Found by kselftest/iommu/iommufdfailnth...

UBUNTU-CVE-2023-53503

In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4getgroupinfo to fail Previously, ext4getgroupinfo would treat an invalid group number as BUG, since in theory it should never happen. However, if a malicious attaker or fuzzer modifies the superblock via the block...

CVE-2023-53503

In the Linux kernel, the vulnerability CVE-2023-53503 affects ext4: ext4_get_group_info() could underflow when computing a block group if s_first_data_block is set to an extremely large value due to a malicious attacker with write access to the block device while the filesystem is mounted. This c...

CVE-2023-53503 ext4: allow ext4_get_group_info() to fail

In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4getgroupinfo to fail Previously, ext4getgroupinfo would treat an invalid group number as BUG, since in theory it should never happen. However, if a malicious attaker or fuzzer modifies the superblock via the block...

CVE-2023-53482

The CVE-2023-53482 is a Linux kernel vulnerability in iommu_group_alloc() where an error unwind path may leak iommu_group if iommu_group_grate_file() fails. The fix destroys the leaked iommu_group on those error paths. Affected component: kernel iommu/group allocation logic. Root cause: missing c...

CVE-2023-53482 iommu: Fix error unwind in iommu_group_alloc()

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix error unwind in iommugroupalloc If either iommugroupgratefile fails then the iommugroup is leaked. Destroy it on these error paths. Found by kselftest/iommu/iommufdfailnth...

CVE-2023-53482 iommu: Fix error unwind in iommu_group_alloc()

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix error unwind in iommugroupalloc If either iommugroupgratefile fails then the iommugroup is leaked. Destroy it on these error paths. Found by kselftest/iommu/iommufdfailnth...

CVE-2023-53450

The CVE-2023-53450 entry concerns the Linux kernel ext4 subsystem. A malicious fuzzer that overwrites the ext4 superblock while mounted can set s_first_data_block to a very large value, causing the block-group calculation to underflow and trigger a BUG_ON. The fix changes the BUG_ON to ext4_warni...

CVE-2023-53450 ext4: remove a BUG_ON in ext4_mb_release_group_pa()

In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUGON in ext4mbreleasegrouppa If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the sfirstdatablock is set to a very large number, the calculation of the block group can underflow,...

CVE-2023-53450 ext4: remove a BUG_ON in ext4_mb_release_group_pa()

In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUGON in ext4mbreleasegrouppa If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the sfirstdatablock is set to a very large number, the calculation of the block group can underflow,...

Operation Cronos and the Takedown of LockBit: A Cybersecurity Milestone

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Introduction LockBit aka ABCD Ransomware, one of the most destructive ransomware groups in history, was dismantled in early 2024 through a...