CVE-2025-38525

A flaw was found in the Linux kernel’s Remote Execution RPC RxRPC implementation, where the rxrpcassessMTUsize function is invoked with interrupts disabled during the handling of an incoming call. This function queries the IP layer for route MTU information, but the IP layer internally uses...

PT-2025-33667

Name of the Vulnerable Software and Affected Versions: Copier versions prior to 9.9.1 Description: Copier exposes pathlib.Path objects in the Jinja context with unconstrained I/O methods, allowing a safe template to read and write arbitrary files. This renders the security model regarding...

Linux Distros Unpatched Vulnerability : CVE-2023-46277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - please aka pleaser through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. If both TIOCSTI and TIOCLINUX are disabled, this cannot...

CVE-2025-38525

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix irq-disabled in localbhenable The rxrpcassessMTUsize function calls down into the IP layer to find out the MTU size for a route. When accepting an incoming call, this is called from rxrpcnewincomingcall which holds...

UBUNTU-CVE-2025-38525

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix irq-disabled in localbhenable The rxrpcassessMTUsize function calls down into the IP layer to find out the MTU size for a route. When accepting an incoming call, this is called from rxrpcnewincomingcall which holds...

CVE-2025-38547

CVE-2025-38547 affects the Linux kernel IIO ADC driver for AXP717 (iio: adc: axp20x_adc). The issue is a missing sentinel entry in the AXP717 ADC channel maps, which can trigger a KASAN warning. The fix adds the missing sentinel entry to the channel maps. No exploitation details are provided in t...

CVE-2025-38531 iio: common: st_sensors: Fix use of uninitialize device structs

In the Linux kernel, the following vulnerability has been resolved: iio: common: stsensors: Fix use of uninitialize device structs Throughout the various probe functions &indiodev-dev is used before it is initialized. This caused a kernel panic in stsensorspowerenable when the call to...

CVE-2025-38525 rxrpc: Fix irq-disabled in local_bh_enable()

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix irq-disabled in localbhenable The rxrpcassessMTUsize function calls down into the IP layer to find out the MTU size for a route. When accepting an incoming call, this is called from rxrpcnewincomingcall which holds...

CVE-2025-38525

CVE-2025-38525 concerns the Linux kernel RXRPC code path where rxrpc_assess_MTU_size() is invoked with IRQs disabled, triggering a warning in the IP layer via local_bh_enable() and potential interrupt handling issues. The issue is resolved by moving the MTU-size assessment out of rxrpc_init_peer(...

Linux Distros Unpatched Vulnerability : CVE-2023-53035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix kernel-infoleak in nilfsioctlwrapcopy The ioctl helper function nilfsioctlwrapcopy, which exchanges a metadata array to/from user space, may copy...

Linux Distros Unpatched Vulnerability : CVE-2025-38236

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: afunix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free in...

Linux Distros Unpatched Vulnerability : CVE-2021-4155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could u...

Malicious code in archaeometry-umbriel-callback-io (npm)

The package archaeometry-umbriel-callback-io was found to contain malicious code...

CVE-2025-9042 Rockwell Automation FLEX 5000 I/O - Module Fault

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the 5094-IY8 device. It causes the module to enter a fault state with the Module LED flashing red. Upon un-inhibiting, the module returns a connection fault Code 160010, and the module cannot...

Apple macOS Sequoia code execution vulnerability (CNVD-2025-19511)

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from a code execution vulnerability that is caused due to an error in the model I/O component when opening a specially crafted file. An attacker can exploit the vulnerability to execute...

Apple macOS Sequoia code execution vulnerability

Apple macOS Sequoia is an operating system from the American company Apple Apple. A code execution vulnerability exists in Apple macOS Sequoia, which is caused due to an error in the model I/O component when opening a specially crafted file, and can be exploited by an attacker to execute arbitrar...

Linux Distros Unpatched Vulnerability : CVE-2024-58091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Add shadow buffering for deferred I/O DMA areas are not necessarily backed by...

Linux Distros Unpatched Vulnerability : CVE-2023-53056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Synchronize the IOCB count to be in order A system hang was observed with the...

Linux Distros Unpatched Vulnerability : CVE-2021-47435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: fix mempool NULL pointer race when completing IO dmiodecpending calls endioacct first and will then dec md in-flight pending count. But if a task is swappin...

Linux Distros Unpatched Vulnerability : CVE-2021-3491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The iouring subsystem in the Linux kernel allowed the MAXRWCOUNT limit to be bypassed in the PROVIDEBUFFERS operation, which led to negative values being usedin...