SUSE CVE-2025-47151

A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability...

The vulnerability of the cifs_init_netfs() function in the fs/smb/client/cifsfs.c module, which is part of the SMB client support in Linux kernel, allows a hacker to induce a service failure.

The vulnerability of the cifsinitnetfs function in the fs/smb/client/cifsfs.c module of the SMB client support in Linux kernel involves insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `ServerTraceManager::initServerTrace` function in the `ServerTraceManager.cpp` module of the “Red Database” database management system allows a hacker to conceal their actions within the system.

The vulnerability of the ServerTraceManager::initServerTrace function in the ServerTraceManager.cpp module of the “Red Database” database management system is related to the loss of information that is crucial for ensuring security. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the dcn32_init_hw() function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32_hwseq.c driver module allows a hacker to cause a service failure in the Linux operating system’s AMD graphics card Direct Rendering Infrastructure (DRI) support driver.

The vulnerability of the dcn32inithw function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32hwseq.c driver module of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to the use of pointers. Exploiting this vulnerability could...

SUSE SLES15 Security Update : kernel (Live Patch 15 for SLE 15 SP6) (SUSE-SU-2025:3970-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:3970-1 advisory. This update for the Linux Kernel 6.4.0-1506002370 fixes one issue. The following security issue was fixed: - CVE-2025-38664: ice: Fix a null pointer...

RHEL 9 : kernel (RHSA-2025:19886)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:19886 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ethtool: check device is...

OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses

Impact Unauthenticated denial of service. Summary When installing module packages from attacker-controlled sources, tofu init may use unbounded memory, cause high CPU usage, or crash when encountering maliciously-crafted TLS certificate chains or tar archives. Those who depend on modules or...

EUVD-2025-38039

OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses...

GHSA-W2JF-268Q-MRVH OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses

Impact Unauthenticated denial of service. Summary When installing module packages from attacker-controlled sources, tofu init may use unbounded memory, cause high CPU usage, or crash when encountering maliciously-crafted TLS certificate chains or tar archives. Those who depend on modules or...

Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002370 fixes one issue. The following security issue was fixed: CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2025:3970-1 Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002370 fixes one issue. The following security issue was fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631...

kernel security update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990418)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990418 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: unexport init-annotated mdiobusinit EXPORTSYMBOL and init is a bad combination because...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990516)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990516 advisory. In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885vdevinit return cx23885vdevinit can return a NULL pointer, but...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990618)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990618 advisory. In the Linux kernel, the following vulnerability has been resolved: net: xfrm: unexport init-annotated xfrm4protocolinit EXPORTSYMBOL and init is a bad combination...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990519)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990519 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent use of lock before it is initialized If there is a failure during probe of hfi...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990428)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990428 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: unexport init-annotated seg6hmacinit EXPORTSYMBOL and init is a bad combination becaus...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990454 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/xics: fix refcount leak in icpopalinit The offindcompatiblenode function returns a node...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990481 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: imsttfb: fix a resource leak in probe I've re-written the error handling but the bug is th...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990486)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990486 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: fix memory leak in jffs2dofillsuper If jffs2iget or dmakeroot in jffs2dofillsuper returns ...