kernel: net: atlantic: fix aq_vec index out of range error

A vulnerability was found in the Linux kernel's Aquantia Atlantic driver, where a lack of proper bounds checking during loop indexing can lead to an out-of-bounds access. This can lead to undefined system behavior and a denial of service...

The vulnerability of the function ieee80211_get_rate_duration() in the net/mac80211/airtime.c module of the mac80211 stack in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ieee80211getrateduration function in the net/mac80211/airtime.c module of the mac80211 stack in the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the diNewExt() function in the fs/jfs/jfs_imap.c module of the JFS file system support in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the diNewExt function in the fs/jfs/jfsimap.c module of the Linux file system support library is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dbAllocBits() function in the fs/jfs/jfs_dmap.c module of the Linux file system support for JFS kernels allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dbAllocBits function in the fs/jfs/jfsdmap.c module of the Linux file system support module JFS is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Vulnerability of the amdgpu_discovery_reg_base_init() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c file – This driver provides support for AMD GPU cores in Linux operating systems’ Direct Rendering Infrastructure (DRI) components. This vulnerability allows attackers to cause system failures.

Vulnerability of the amdgpudiscoveryregbaseinit function in the drivers/gpu/drm/amd/amdgpu/amdgpudiscovery.c file – The drivers for AMD GPU cores in Linux operating systems are vulnerable due to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a system...

Vulnerability of the ath9k_htc_txstatus() function in the drivers/net/wireless/ath/ath9k/htc_drv_txrx.c file – This driver provides support for Atheros/Qualcomm wireless adapter devices in the Linux operating system. It can be exploited by attackers to cause service failures.

Vulnerability of the ath9khtctxstatus function in the drivers/net/wireless/ath/ath9k/htcdrvtxrx.c file – The Atheros/Qualcomm wireless adapter support driver for Linux operating systems has a vulnerability related to unvalidated array indexing. Exploiting this vulnerability could allow an attacke...

The vulnerability of the dtSplitRoot() function in the fs/jfs/jfs_dtree.c module of the JFS file system support in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dtSplitRoot function in the fs/jfs/jfsdtree.c module of the Linux operating system’s file system support module is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the dbAdjTree() function in the fs/jfs/jfs_dmap.c module of the JFS file system support module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dbAdjTree function in the fs/jfs/jfsdmap.c module of the JFS file system support in Linux’s operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the kvm_riscv_vcpu_sbi_init() function in the arch/riscv/kvm/vcpu_sbi.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmriscvvcpusbiinit function in the arch/riscv/kvm/vcpusbi.c module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the dcn21_link_encoder_create() function in the drivers/gpu/drm/amd/display/dc/dcn21/dcn21_resource.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dcn21linkencodercreate function in the drivers/gpu/drm/amd/display/dc/dcn21/dcn21resource.c module of the Linux kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the mgb4_cmt_set_vin_freq_range() function in the drivers/media/pci/mgb4/mgb4_cmt.c module of the Linux kernel allows a hacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the mgb4cmtsetvinfreqrange function in the drivers/media/pci/mgb4/mgb4cmt.c module of the Linux kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of protected information...

The vulnerability of the HPIMSGX__init() function in the sound/pci/asihpi/hpimsgx.c module of the asihpi component of the /sound/pci/asihpi/hpimsgx.c kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HPIMSGXinit function in the sound/pci/asihpi/hpimsgx.c module of the asihpi component of the /sound/pci/asihpi/hpimsgx.c kernel of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the...

Vulnerability of the bnxt_rx_pkt() function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c module – A Linux kernel Ethernet network adapter driver support mechanism that allows an attacker to access protected information or cause service failure.

Vulnerability of the bnxtrxpkt function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c module – The Linux kernel’s Ethernet network adapter support driver has vulnerabilities related to indexing mechanisms. Exploiting this vulnerability could allow attackers to access protected information or...

The vulnerability of the add_secret_dac_path() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the addsecretdacpath function in the Linux operating system is related to incorrect array indexing. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-5257

SummaryThis advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and potentially indexed by search engines. This could lead to the unintended disclosure of draft content or sensitive information. Unauthorized Access to...

CVE-2025-5257 Predictable Page Indexing Might Lead to Sensitive Data Exposure

SummaryThis advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and potentially indexed by search engines. This could lead to the unintended disclosure of draft content or sensitive information. Unauthorized Access to...

PT-2025-23102 · Mautic · Mautic

Name of the Vulnerable Software and Affected Versions: Mautic affected versions not specified Description: The issue concerns unauthorized access to unpublished page previews in Mautic, which could be accessed by unauthenticated users and potentially indexed by search engines. This could lead to...

ABB M2M Gateway Out-Of-Bound Read/Write in embedded Linux Kernel (CVE-2023-42753)

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...

The vulnerability of the amdgpu_dm_initialize_drm_device() function in the DRI driver allows a hacker to cause a system failure. This vulnerability relates to AMD GPU-based Linux operating system hardware.

The vulnerability of the amdgpudminitializedrmdevice function in the DRI driver for AMD graphics cards in Linux operating systems is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ath12k_station_assoc() function in the Atheros/Qualcomm wireless communication adapter support driver for Linux operating systems allows a hacker to induce a service failure.

The vulnerability of the ath12kstationassoc function in the Atheros/Qualcomm wireless adapter support driver for Linux operating systems is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...