PT-2025-55477

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p read tiff init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached...

Linux Distros Unpatched Vulnerability : CVE-2025-9820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token label longer...

The vulnerability of the svm_migrate_init() function in the drivers/gpu/drm/amd/amdkfd/kfd_migrate.c file of the DRI support driver for AMD GPU-based Linux operating system kernels allows a malicious actor to cause a service failure.

The vulnerability of the svmmigrateinit function in the drivers/gpu/drm/amd/amdkfd/kfdmigrate.c file, a driver for supporting Direct Rendering Infrastructure DRI in AMD graphics cards for Linux operating systems, is related to improper resource management. Exploiting this vulnerability can allow ...

Vulnerabilities of functions init_kcs_data_with_state(), start_kcsTransaction(), and kcs_event() in the Linux operating system, allowing a hacker to cause a service failure

The vulnerabilities of the initkcsdatawithstate, startkcsTransaction, and kcsevent functions in the Linux operating system are related to the execution of a loop with an unreachable exit condition. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

Alibaba Cloud Linux 3 : 0183: lasso (ALINUX3-SA-2025:0183)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0183 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-47151: A type confusion vulnerability exis...

USN-7879-1 linux, linux-aws, linux-gcp, linux-hwe-6.14, linux-oracle, linux-realtime vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Several security issues were discovered in the Linux kernel. An attacker could possibly use...

TencentOS Server 4: cloud-init (TSSA-2025:0573)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0573 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: kernel (TSSA-2025:0430)

"The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0430 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilitie...

SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2025:4140-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4140-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following...

CVE-2025-48593

In btahfclientcbinit of btahfclientmain.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-37492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hid-pl component where errors during initialization are not properly reported. This failure to handle probe errors can lead to a NULL pointer dereference the first...

CVE-2025-48593

In btahfclientcbinit of btahfclientmain.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48593

A use-after-free vulnerability exists in the bta_hf_client_cb_init function of bta_hf_client_main.cc within the Android Bluetooth subsystem. This flaw is triggered when a phone responds with an error during SDP discovery , causing a tSDP_DISCOVERY_DB to be freed while a dangling pointer remains i...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56562)

i3c: master: miss free initdynaddr at i3cmasterputi3caddrs. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504562; scriptversion"1.2";...

GO-2025-4101 OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses in github.com/opentofu/opentofu

OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses in github.com/opentofu/opentofu...

lasso: Type confusion in Entr'ouvert Lasso

A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.8.2 and prior. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability...

The vulnerability of the `ixgbevf_init_module()` function in the `drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c` file of the Linux kernel’s Ethernet driver support module allows a attacker to cause a service failure.

The vulnerability of the ixgbevfinitmodule function in the drivers/net/ethernet/intel/ixgbevf/ixgbevfmain.c file of the Linux kernel’s Ethernet driver framework is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the mpi_ec_init() function in the lib/mpi/ec.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mpiecinit function in the lib/mpi/ec.c module of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the a4xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a4xx_gpu.c file of the driver module allows a hacker to cause a service failure. This vulnerability exposes the driver to attacks related to Direct Rendering Infrastructure (DRI) in Linux operating systems.

The vulnerability of the a4xxgpuinit function in the drivers/gpu/drm/msm/adreno/a4xxgpu.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a servic...

The vulnerability in the function intel_engines_init() of the drivers/gpu/drm/i915/gt/intel_engine_cs.c driver module allows a hacker to cause a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support in the Linux kernel.

The vulnerability of the intelenginesinit function in the drivers/gpu/drm/i915/gt/intelenginecs.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernel, is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an...