[SECURITY] Fedora 42 Update: corosync-3.1.9-3.fc42

This package contains the Corosync Cluster Engine Executive, several default APIs and libraries, default configuration files, and an init script...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF bsc1237918. CVE-2022-49465: blk-throttle: Set BIOTHROTTLED when bio has been throttled bsc1238919...

SUSE CVE-2025-29481

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

powerpc/powernv: Add a null pointer check in opal_powercap_init()

...

The vulnerability of the Cloud-init configuration tool, related to insufficient protection of registration data, allows a perpetrator to access confidential information.

The vulnerability of the Cloud-init configuration tool is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of the `init_imlib_fonts()` function in the Imlib image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the initimlibfonts function in the Imlib image processing library is related to the failure of the operation outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause servic...

PT-2025-15842 · National Instruments · Ni Labview

Name of the Vulnerable Software and Affected Versions: NI LabVIEW versions prior to 2025 Q1 Description: The issue is an out of bounds write vulnerability due to improper bounds checking in the InitCPUInformation function. This may result in information disclosure or arbitrary code execution...

AZL-59772 CVE-2025-22014 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

AZL-59745 CVE-2025-29481 affecting package bcc for versions less than 0.29.1-3

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

DEBIAN-CVE-2025-29481

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

CVE-2025-29481

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

AZL-61765 CVE-2025-29481 affecting package pcp 6.3.2-1

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpfobjectinitprog function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under...

UBUNTU-CVE-2025-3359

A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment...

PT-2025-27740

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference issue has been identified in the mt7915 mmio wed init function. The devm ioremap function returns NULL on error, but mt7915 mmio wed init does not check for...

PT-2025-27741

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference issue has been identified in the Linux kernel, specifically in the mt7996 mmio wed init function. This issue arises because devm ioremap returns NULL on erro...

The vulnerability of the functions intel_iommu_init() (drivers/iommu/intel/iommu.c) and enable_drhd_fault_handling() (drivers/iommu/intel/dmar.c) in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the functions inteliommuinit drivers/iommu/intel/iommu.c and enabledrhdfaulthandling drivers/iommu/intel/dmar.c in the Linux kernel is related to insufficient locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the bpf_test_init() function (net/bpf/test_run.c) in the Linux operating system kernel, which allows an attacker to escalate their privileges

The vulnerability of the bpftestinit function net/bpf/testrun.c in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...

libbpf 安全漏洞

libbpf is a libbpf open source user-space library/ API for loading and interacting with BPF programs. A security vulnerability exists in libbpf version 1.5.0, which originates from a buffer overflow that can be exploited by a local attacker to execute arbitrary code via the bpfobjectinitprog...

SUSE CVE-2025-21966

In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corruptbiobyte feature Fix memory corruption due to incorrect parameter being passed to bioinit...

OESA-2025-1372 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: make sure cache entry active before cacheshow The function cshow was called with protection from RCU. This only ensures that cp will not be freed...