OESA-2025-2155 gnuplot security update

Gnuplot is a portable command-line driven graphing utility for Linux, OS/2, MS Windows, OSX, VMS, and many other platforms. The source code is copyrighted but freely distributed i.e., you don't have to pay for it. It was originally created to allow scientists and students to visualize mathematica...

The vulnerability of the ath12k_core_init() function in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the ath12kcoreinit function in the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerabilities of the functions xe_guc_submit_init() and xe_guc_submit_wedge() in the drivers/gpu/drm/xe/xe_guc_submit.c file of the Linux kernel allow a attacker to cause a service failure.

The vulnerability of the functions xegucsubmitinit and xegucsubmitwedge in the drivers/gpu/drm/xe/xegucsubmit.c file of the Linux kernel is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-26419

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-26419

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-26419

A logic error in the initPhoneSwitch function of SystemSettingsFragment.java within the System component of Wear OS enables a potential Factory Reset Protection (FRP) bypass . This vulnerability could lead to a local escalation of privilege without requiring additional execution privileges. Explo...

CVE-2025-26419

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

AZL-66842 CVE-2025-38716 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfsfindinit The hfsfindinit method can trigger the crash if tree pointer is NULL: 45.746290 T9787 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 1...

UBUNTU-CVE-2025-38716

In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfsfindinit The hfsfindinit method can trigger the crash if tree pointer is NULL: 45.746290 T9787 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 1...

CVE-2025-38716 hfs: fix general protection fault in hfs_find_init()

In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfsfindinit The hfsfindinit method can trigger the crash if tree pointer is NULL: 45.746290 T9787 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 1...

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service.

...

ice: Fix a null pointer dereference in ice_copy_and_init_pkg()

...

drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw

...

LoongArch: Disable IRQ before init_fn() for nonboot CPUs

...

PT-2025-40634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ASoC Qualcomm q6apm-lpass-dais component. Specifically, a NULL pointer dereference can occur if the initialization of the source graph fails...

Vulnerability of the macsec_dev_init() function in the drivers/net/macsec.c module – The network device driver in Linux allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the macsecdevinit function in the drivers/net/macsec.c module – The Linux kernel network device driver framework is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the ref_tracker_dir_init() function in the include/linux/ref_tracker.h module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the reftrackerdirinit function in the include/linux/reftracker.h module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Vulnerability of the hub_port_init() function in the drivers/usb/core/hub.c module – The USB hub device driver in the Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the hubportinit function in the drivers/usb/core/hub.c module – The Linux kernel’s USB hub driver relies on buffer overflow attacks. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Linux Distros Unpatched Vulnerability : CVE-2025-38507

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: nintendo: avoid bluetooth suspend/resume stalls Ensure we don't stall or panic the kernel when using bluetooth-connected controllers. This was reported as ...

Linux Distros Unpatched Vulnerability : CVE-2025-38611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vmci: Prevent the dispatching of uninitialized payloads The reproducer executes the host's unlockedioctl call in two different tasks. When initcontext fails, th...