30170 matches found
CVE-2025-38109
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix ECVF vports unload on shutdown flow Fix shutdown flow UAF when a virtual function is created on the embedded chip ECVF of a BlueField device. In such case the vport acl ingress table is not properly destroyed. ECVF...
CVE-2025-38101
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...
Security Bulletin: IBM Sterling Transformation Extender is affected by multiple IBM Java 8 vulnerabilities
Summary IBM Sterling Transformation Extender uses IBM SDK, Java Technology Edition, Version 8. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote attacker to cause high confidentiality and high...
CVE-2025-38124 net: fix udp gso skb_segment after pull from frag_list
In the Linux kernel, the following vulnerability has been resolved: net: fix udp gso skbsegment after pull from fraglist Commit a1e40ac5b5e9 "net: gso: fix udp gso fraglist segmentation after pull from fraglist" detected invalid geometry in fraglist skbs and redirects them from skbsegmentlist to...
CVE-2025-38101 ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...
CVE-2025-38101
CVE-2025-38101 is publicly addressed in the openSUSE/SUSE advisory for the Linux kernel. The issue concerns the ring-buffer subsystem, specifically the function ring_buffer_subbuf_order_set(), where the critical section was enlarged to ensure error handling runs with the per-buffer mutex held, pr...
CVE-2025-38101 ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...
SUSE-SU-2025:02214-1 Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2025-46701: Refactored CGI servlet to access resources via WebResources bsc1243815. - CVE-2025-48988: Limited the total number of parts in a multi-part request and limits the size of the headers provided with each part bsc1244656. -...
Ubuntu: Security Advisory (USN-7611-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AlmaLinux 9 : php:8.2 (ALSA-2025:7432)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:7432 advisory. php: Leak partial content of the heap through heap buffer over-read in mysqlnd CVE-2024-8929 php: Single byte overread with convert.quoted-printable-decod...
Fedora 42 : webkitgtk (2025-5427adc3f4)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5427adc3f4 advisory. Limit the data stored in session state. Remove the empty area below the title bar in Web Inspector when not docked. Fix various crashes and renderin...
PT-2025-27774
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves multiple services of the affected system, as well as different scopes of the same service, reusing the same credentials. Recommendations: At the moment, there is no...
OPENSUSE-SU-2025:15295-1 python311-salt-3006.0-41.1 on GA media
These are all security issues fixed in the python311-salt-3006.0-41.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15213-1 curl-8.14.1-4.1 on GA media
These are all security issues fixed in the curl-8.14.1-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15293-1 redis-8.0.2-1.1 on GA media
These are all security issues fixed in the redis-8.0.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15225-1 govulncheck-vulndb-0.0.20250612T141001-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250612T141001-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15242-1 libsoup-2_4-1-2.74.3-12.1 on GA media
These are all security issues fixed in the libsoup-24-1-2.74.3-12.1 package on the GA media of openSUSE Tumbleweed...
AlmaLinux 9 : git-lfs (ALSA-2025:7256)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:7256 advisory. golang: crypto/tls: panic when processing post-handshake message on QUIC connections CVE-2023-39321 golang: crypto/tls: lack of a limit on buffered...