8136 matches found
CVE-2025-38695 scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfcvport structure If a call to lpfcsli4readrev from lpfcsli4hbasetup fails, the resultant cleanup routine lpfcsli4vportdeletefcpxriaborted may occur before sli4hba.hdwqs are...
hwmon: (corsair-cpro) Validate the size of the received input buffer
...
scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths
...
bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
...
drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw
...
drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
...
libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).
...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from lpfc not checking for the hdwq null pointer when cleaning up vport structures...
net: atlantic: Fix DMA mapping for PTP hwts ring
...
hwrng: cavium - fix NULL but dereferenced coccicheck error
...
Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.
...
media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
...
drm/amd/display: Check dce_hwseq before dereferencing it
...
mm/vmscan: don't try to reclaim hwpoison folio
...
Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.
...
i40e: Do not allow untrusted VF to remove administratively set MAC
...
drm/amd/display: Wake DMCUB before sending a command
...
PUB-A-377489833
In hwoemimeiinit of hwoemimei.c, there is a possible escalation of privilege due to hardware identifiers not being fused to OTP. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Linux Distros Unpatched Vulnerability : CVE-2025-38548
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Validate the size of the received input buffer Add bufferrecvsize to sto...
Linux Distros Unpatched Vulnerability : CVE-2025-38582
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/hns: Fix double destruction of rsvqp rsvqp may be double destroyed in error flow, first in freemrinit, and then in hnsroceexit. Fix it by moving the...