Siemens SIMATIC IPCs

SUMMARY The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new versions for the affected products...

EUVD-2001-0420

Malware in sbrugna...

EUVD-2025-13219

Malicious code in bioql PyPI...

EUVD-2023-37909

Malicious code in bioql PyPI...

EUVD-2025-20044

Malicious code in bioql PyPI...

SUSE-SU-2025:03214-1 Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002360 fixes several issues. The following security issue was fixed: - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU bsc1246030...

SUSE SLES15 Security Update : kernel (Live Patch 42 for SLE 15 SP4) (SUSE-SU-2025:03183-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03183-1 advisory. This update for the Linux Kernel 5.14.21-15040024170 fixes one issue. The following security issue was fixed: - CVE-2025-38212: ipc: fix to protect IP...

SUSE-SU-2025:20781-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_10

This update for kernel-livepatch-MICRO-6-0-RTUpdate10 fixes the following issues: - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU bsc1246030 - CVE-2025-38494: HID: core: do not bypass hidhwrawrequest bsc1247350 - CVE-2025-38495: HID: core: ensure the allocated report buffer can conta...

SUSE-SU-2025:20765-1 Security update for kernel-livepatch-MICRO-6-0_Update_9

This update for kernel-livepatch-MICRO-6-0Update9 fixes the following issues: - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU bsc1246030...

Security update for the Linux Kernel (Live Patch 70 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122266 fixes one issue. The following security issue was fixed: CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU bsc1246030. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

Linux Distros Unpatched Vulnerability : CVE-2025-38212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, 0 0:...

CVE-2025-38212

In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, 0 0: https://lore.kernel.org/all/[email protected]/ idrforeach is protected by rwsem, but thi...

CVE-2025-38212

In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, 0 0: https://lore.kernel.org/all/[email protected]/ idrforeach is protected by rwsem, but thi...

CVE-2025-38212 ipc: fix to protect IPCS lookups using RCU

In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, 0 0: https://lore.kernel.org/all/[email protected]/ idrforeach is protected by rwsem, but thi...

CVE-2025-38212

CVE-2025-38212 affects the Linux kernel IPC subsystem. The bug was a use-after-free in radix_tree_node_free triggered by idr_for_each() not being in an RCU read-critical region when called from shm_destroy_orphaned(), risking reading freed memory during radix_tree_for_each_slot(). The fix adds RC...

CVE-2025-38212 ipc: fix to protect IPCS lookups using RCU

In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, 0 0: https://lore.kernel.org/all/[email protected]/ idrforeach is protected by rwsem, but thi...

CVE-2025-48735

A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2220219 before 21.45.8.2.3230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body...

CVE-2023-33757

A lack of SSL certificate validation in Splicecom iPCS iOS App v1.3.4, iPCS2 iOS App v2.8 and before, and iPCS Android App v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack...

BOS IPCs SQL Injection Vulnerability

BOS IPCs is a family of sensors from BOS. A SQL injection vulnerability exists in versions prior to BOS IPCs 21.45.8.2.3230220, which stems from improper handling of the request body and could lead to SQL injection...

CVE-2025-48735

CVE-2025-48735 concerns BOS IPCs where firmware before 21.45.8.2.3_230220 is vulnerable to a SQL injection in the request body processing. The affected component is the BOS IPCs firmware stack (versions from 21.45.8.2.2_220219 up to, but not including, 21.45.8.2.3_230220). The root cause is impro...