CVE-2025-37887: Use of Uninitialized Resource

In the Linux kernel, the following vulnerability has been resolved: pdscore: handle unsupported PDSCORECMDFWCONTROL result If the FW doesn't support the PDSCORECMDFWCONTROL command the driver might at the least print garbage and at the worst crash when the user runs the "devlink dev info" devlink...

CVE-2024-45562

Memory corruption during concurrent access to server info object due to unprotected critical field...

CVE-2024-45564

Memory corruption during concurrent access to server info object due to incorrect reference count update...

PT-2025-20333

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data-race issue has been identified in the Linux kernel related to io uring. The issue arises when the request owner changes other flag bits, causing KCSAN to complain. The problem...

CVE-2024-45564

Memory corruption during concurrent access to server info object due to incorrect reference count update...

CVE-2024-45562

Memory corruption during concurrent access to server info object due to unprotected critical field...

CVE-2024-45564

Memory corruption during concurrent access to server info object due to incorrect reference count update...

CVE-2024-45562

CVE-2024-45562 describes memory corruption during concurrent access to a server info object caused by an unprotected critical field. Sources (NVD, Red Hat, CVE List, CNNVD, VulnEnrichment) confirm the issue and its consistency across feeds. CVSS v3.1 base scores indicate high impact for confident...

CVE-2024-45562: Use After Free

Memory corruption during concurrent access to server info object due to unprotected critical field...

CVE-2024-45564: Use After Free

Memory corruption during concurrent access to server info object due to incorrect reference count update...

CVE-2025-45610

Incorrect access control in the component /scheduleLog/info/1 of PassJava-Platform v3.0.0 allows attackers to access sensitive information via a crafted payload...

Qemu-kvm: 'qemu-img info' leads to host file read/write

...

CVE-2025-45610: Improper Access Control

Incorrect access control in the component /scheduleLog/info/1 of PassJava-Platform v3.0.0 allows attackers to access sensitive information via a crafted payload...

PassJava-Platform 安全漏洞

PassJava-Platform is a Spring Cloud open source system for interview brushing by Jackson0714 Individual Developer. A security vulnerability exists in PassJava-Platform version v3.0.0, which stems from improper access control of the component /scheduleLog/info/1, which could lead to access to...

CVE-2025-45237: Improper Access Control

Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password...

CVE-2023-53035

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel-infoleak in nilfsioctlwrapcopy The ioctl helper function nilfsioctlwrapcopy, which exchanges a metadata array to/from user space, may copy uninitialized buffer regions to user space memory for read-only ioctl...

CVE-2023-53085

In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix info leak when failing to get panel id Make sure to clear the transfer buffer before fetching the EDID to avoid leaking slab data to the logs on errors that leave the buffer unchanged...

SUSE CVE-2023-53035

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel-infoleak in nilfsioctlwrapcopy The ioctl helper function nilfsioctlwrapcopy, which exchanges a metadata array to/from user space, may copy uninitialized buffer regions to user space memory for read-only ioctl...

SUSE CVE-2023-53037

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Bad drive in topology results kernel crash When the SAS Transport Layer support is enabled and a device exposed to the OS by the driver fails INQUIRY commands, the driver frees up the memory allocated for an interna...

SUSE CVE-2023-53069

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: Add missing free for allocpercpu Add the freepercpu for the allocated "vf-hw.lmtinfo" in order to avoid memory leak, same as the "pf-hw.lmtinfo" in drivers/net/ethernet/marvell/octeontx2/nic/otx2pf.c...