PT-2025-16762 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been resolved, related to adding a folio to a bio. On certain architectures, such as aarch64, where large hugepages are supported e.g., 16GB, the offset...

The vulnerability of the bfq_setup_merge() function in the block/bfq-iosched.c module exposes the block-level kernel support of the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bfqsetupmerge function in the block/bfq-iosched.c module related to Linux kernel’s block-level support involves the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2025-1359)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: fix data-races around sk-skforwardallocCVE-2024-53124 nvme-multipath: defer partition scanningCVE-2024-53093 bpf: synclinkedregs must preserv...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana within Instana Agent container image build 292 Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The...

CVE-2025-21447

Memory corruption may occur while processing device IO control call for session control...

CVE-2024-43067

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory...

PT-2025-15693 · Apache · Apache Pulsar

Name of the Vulnerable Software and Affected Versions: Apache Pulsar IO versions prior to 3.0.11 Apache Pulsar IO versions prior to 3.3.6 Apache Pulsar IO versions prior to 4.0.4 Description: The issue affects Apache Pulsar IO's Apache Kafka connectors, where sensitive configuration properties ar...

SUSE SLED15 / SLES15 / openSUSE 15 : Recommended update for apache-commons-io (SUSE-SU-SUSE-RU-2025:1150-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2025:1150-1 advisory. apache-commons-io was updated from version 2.15.1 to 2.18.0: - Key changes across versions: Clean...

UBUNTU-CVE-2025-3359

A flaw was found in GNUPlot. A segmentation fault via IOstrinitstaticinternal may jeopardize the environment...

CVE-2025-21447

Memory corruption may occur while processing device IO control call for session control...

CVE-2024-43067

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory...

CVE-2025-21447

CVE-2025-21447 affects Qualcomm Snapdragon chipsets. The issue is memory corruption occurring when processing a device IOCTL call for session control, caused by an underlying vulnerability in the IOCTL handling path. The provided sources (NVD/Red Hat/CVE record and related feeds) confirm the memo...

CVE-2025-21447 Improper Validation of Array Index in Computer Vision

Memory corruption may occur while processing device IO control call for session control...

CVE-2024-43067 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory...

SUSE-RU-2025:1150-1 Recommended update for apache-commons-io

This update for apache-commons-io fixes the following issues: apache-commons-io was updated from version 2.15.1 to 2.18.0: - Key changes across versions: Cleaner code and updated dependencies Improved security when handling serialized data with the new safe deserialization feature New features fo...

PT-2025-15217 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon and related products versions prior to the fixed version Description: Memory corruption may occur while processing device IO control call for session control. Recommendations: At the moment, there is no information about a...

Security Bulletin: Vulnerabilities in Apache Commons IO library affect IBM SPSS Collaboration and Deployment Services

Summary Vulnerabilities in Apache Commons IO library affect IBM SPSS Collaboration and Deployment Services CVE-2024-47554. These have been addressed in the remediation section. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in Apache Common...

USN-7413-1 linux-iot vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Ye Zhang and Nicolas Wu discovered th...

SUSE CVE-2025-21912

In the Linux kernel, the following vulnerability has been resolved: gpio: rcar: Use rawspinlock to protect register access Use rawspinlock in order to fix spurious messages about invalid context when spinlock debugging is enabled. The lock is only used to serialize register access. 4.239592...

OESA-2025-1338 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: block: fix rq-qos breakage from skipping rqqosdonebio a647a524a467 "block: don't call rqqosops-donebio if the bio isn't tracked" made bioendio skip rqqosdonebio ...