The vulnerability of the svm_migrate_init() function in the drivers/gpu/drm/amd/amdkfd/kfd_migrate.c file of the DRI support driver for AMD GPU-based Linux operating system kernels allows a malicious actor to cause a service failure.

The vulnerability of the svmmigrateinit function in the drivers/gpu/drm/amd/amdkfd/kfdmigrate.c file, a driver for supporting Direct Rendering Infrastructure DRI in AMD graphics cards for Linux operating systems, is related to improper resource management. Exploiting this vulnerability can allow ...

Alibaba Cloud Linux 3 : 0183: lasso (ALINUX3-SA-2025:0183)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0183 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-47151: A type confusion vulnerability exis...

USN-7879-1 linux, linux-aws, linux-gcp, linux-hwe-6.14, linux-oracle, linux-realtime vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Several security issues were discovered in the Linux kernel. An attacker could possibly use...

TencentOS Server 4: cloud-init (TSSA-2025:0573)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0573 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

SUSE SLED15: cluster-md-kmp-64kb / cluster-md-kmp-default / dlm-kmp-64kb / etc (SUSE-SU-2025:4140-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4140-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following...

TencentOS Server 4: kernel (TSSA-2025:0430)

"The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0430 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilitie...

CVE-2025-48593

In btahfclientcbinit of btahfclientmain.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-37492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hid-pl component where errors during initialization are not properly reported. This failure to handle probe errors can lead to a NULL pointer dereference the first...

CVE-2025-48593

In btahfclientcbinit of btahfclientmain.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48593

A use-after-free vulnerability exists in the bta_hf_client_cb_init function of bta_hf_client_main.cc within the Android Bluetooth subsystem. This flaw is triggered when a phone responds with an error during SDP discovery , causing a tSDP_DISCOVERY_DB to be freed while a dangling pointer remains i...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56562)

i3c: master: miss free initdynaddr at i3cmasterputi3caddrs. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504562; scriptversion"1.2";...

GO-2025-4101 OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses in github.com/opentofu/opentofu

OpenTofu affected denials of service in "tofu init" with maliciously-crafted module package responses in github.com/opentofu/opentofu...

lasso: Type confusion in Entr'ouvert Lasso

A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.8.2 and prior. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability...

The vulnerability of the a4xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a4xx_gpu.c file of the driver module allows a hacker to cause a service failure. This vulnerability exposes the driver to attacks related to Direct Rendering Infrastructure (DRI) in Linux operating systems.

The vulnerability of the a4xxgpuinit function in the drivers/gpu/drm/msm/adreno/a4xxgpu.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a servic...

The vulnerability of the `ixgbevf_init_module()` function in the `drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c` file of the Linux kernel’s Ethernet driver support module allows a attacker to cause a service failure.

The vulnerability of the ixgbevfinitmodule function in the drivers/net/ethernet/intel/ixgbevf/ixgbevfmain.c file of the Linux kernel’s Ethernet driver framework is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability in the function intel_engines_init() of the drivers/gpu/drm/i915/gt/intel_engine_cs.c driver module allows a hacker to cause a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support in the Linux kernel.

The vulnerability of the intelenginesinit function in the drivers/gpu/drm/i915/gt/intelenginecs.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernel, is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an...

The vulnerability of the mpi_ec_init() function in the lib/mpi/ec.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mpiecinit function in the lib/mpi/ec.c module of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

SUSE-SU-2025:21056-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38008: mm/pagealloc: fix race condition in unaccepted memory handling bsc1244939. - CVE-2025-38539: trace/fgraph: Fix the warning caused by missi...

Security update for lasso

This update for lasso fixes the following issues: CVE-2025-46784: Fixed memory exhaustion in Entr'ouvert Lasso bsc1253094 CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso bsc1253092 CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso bsc1253093 CVE-2025-47151: Fixed type...

SUSE-SU-2025:4090-1 Security update for lasso

This update for lasso fixes the following issues: - CVE-2025-46784: Fixed memory exhaustion in Entr'ouvert Lasso bsc1253094 - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso bsc1253092 - CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso bsc1253093 - CVE-2025-47151: Fixed...