30178 matches found
CVE-2025-38079 crypto: algif_hash - fix double free in hash_accept
In the Linux kernel, the following vulnerability has been resolved: crypto: algifhash - fix double free in hashaccept If accept2 is called on socket type algifhash with MSGMORE flag set and cryptoahashimport fails, sk2 is freed. However, it is also freed in afalgrelease, leading to...
CVE-2025-38064
The CVE-2025-38064 entry concerns the Linux kernel virtio subsystem, specifically virtio-console, where devices continue to write to MMIO after the underlying virtio-pci device is reset, causing hangs in kexec-in-VM scenarios. The issue is mitigated by the kernel fix that breaks all virtio device...
CVE-2025-38064 virtio: break and reset virtio devices on device_shutdown()
In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on deviceshutdown Hongyu reported a hang on kexec in a VM. QEMU reported invalid memory accesses during the hang. Invalid read at addr 0x102877002, size 2, region 'null', reason: rejected...
CVE-2025-38058 __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final mntput from sync umount - raising mntcount after umount2 has verified that victim is not busy, but before it has set MNTSYNCUMOUNT; in...
CVE-2025-38058
CVE-2025-38058 affects the Linux kernel: the function __legitimize_mnt() in fs/namespace.c mis-handled synchronization around MNT_SYNC_UMOUNT, risking an incorrect mnt_count handling and a dropped reference to the caller after umount(2) checks but before MNT_SYNC_UMOUNT is set. The issue is resol...
GHSA-22V5-Q59J-H85M vulnerabilities
Vulnerabilities for packages: chromium...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager (CVE-2025-21587, CVE-2025-30698, CVE-2025-4447)
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition used by IBM Tivoli System Automation Application Manager. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote attacke...
SUSE-SU-2025:01990-1 Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: - Security issues fixed: CVE-2023-45288: Require Go = 1.23 for building bsc1236516 CVE-2025-22870: Bump golang.org/x/net to version 0.39.0 bsc1238686 - Version was updated to 2.53.4 with the following bug fixes:...
GHSA-22V5-Q59J-H85M vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X573-8WX6-VHF4 vulnerabilities
Vulnerabilities for packages: chromium...
Tracking GPTs Third Party Service: Automation, Analysis, and Insights
ChatGPT has quickly advanced from simple natural language processing to tackling more sophisticated and specialized tasks. Drawing inspiration from the success of mobile app ecosystems, OpenAI allows developers to create applications that interact with third-party services, known as GPTs. GPTs ca...
PT-2025-25801 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the x86/sev component. The issue occurs when kdump is running makedumpfile to generate vmcore and dump SNP guest memor...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ksoftirqd boost timing and iteration issues in rcutorture...
PT-2025-25925
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A space cache corruption and potential double allocation issue has been identified in the Linux kernel. The issue arises from a race between caching free space for a block group and...
Veeam Backup and Replication 12.x < 12.3.2.3617 Multiple Vulnerabilities (June 2025) (KB4743)
The version of Veeam Backup and Replication installed on the remote Windows host is 12.x prior to 12.3.2.3617. It is, therefore, affected by multiple vulnerabilities: - A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user. CVE-2025-23121 - A...
PT-2025-25993 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free bug has been identified in the Linux kernel, specifically in the btrfs file system. The issue arises when the btrfs commit transaction function fails, causing the relo...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Requests vulnerabilities (USN-7568-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7568-1 advisory. Dennis Brinkrolf and Tobias Funke discovered that Requests did not correctly...
[slackware-security] xorg-server
New xorg-server packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xorg-server-1.20.14-i586-16slack15.0.txz: Rebuilt. This update fixes security issues: Out-of-bounds access in X Rendering extensi...
CVE-2025-49848
An out-of-bounds write vulnerability exists within the parsing of PRJ files. The issues result from the lack of proper validation of user-supplied data, which can result in different memory corruption issues within the application, such as reading and writing past the end of allocated data...