30179 matches found
CVE-2022-49770
CVE-2022-49770 describes a Linux kernel issue in the Ceph-related path where decoding snaps could leave first_realm and realm pointing to the same snaprealm memory, causing a use-after-free or BUG_ON. The description in the sources confirms the fix was applied to avoid putting the realm twice whe...
CVE-2022-49770 ceph: avoid putting the realm twice when decoding snaps fails
In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding snaps fails When decoding the snaps fails it maybe leaving the 'firstrealm' and 'realm' pointing to the same snaprealm memory. And then it'll put it twice and could cause random...
CVE-2022-49770 ceph: avoid putting the realm twice when decoding snaps fails
In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding snaps fails When decoding the snaps fails it maybe leaving the 'firstrealm' and 'realm' pointing to the same snaprealm memory. And then it'll put it twice and could cause random...
CVE-2022-49770
In the Linux kernel, the following vulnerability has been resolved: ceph: avoid putting the realm twice when decoding snaps fails When decoding the snaps fails it maybe leaving the 'firstrealm' and 'realm' pointing to the same snaprealm memory. And then it'll put it twice and could cause random...
CVE-2022-49769
In the Linux kernel, the following vulnerability has been resolved: gfs2: Check sbbsizeshift after reading superblock Fuzzers like to scribble over sbbsizeshift but in reality it's very unlikely that this field would be corrupted on its own. Nevertheless it should be checked to avoid the...
Security Bulletin:VMware Tanzu Spring Framework could provide weaker than expected security, affects watsonx.data
Summary VMware Tanzu Spring Framework could provide weaker than expected securitycaused by a flaw related to disallowedFields patterns in DataBinder is case insensitive. This could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: VMware Tanzu Spring Framework could...
CVE-2025-37791
CVE-2025-37791 affects the Linux kernel, specifically the ethtool CMIS CDB update path in net/ethtool/cmis_cdb.c. The flaw arises when rpl is passed to ethtool_cmis_module_poll() as a pointer; the code uses the pointer size instead of the actual object size, which should be sizeof(*rpl) (1 byte)....
CVE-2025-37786
In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsatreesetup, it means that we are the last switch of the tree which is successfully probing, and we should be setting up all switches from our probe path. After...
CVE-2025-37756 net: tls: explicitly disallow disconnect
In the Linux kernel, the following vulnerability has been resolved: net: tls: explicitly disallow disconnect syzbot discovered that it can disconnect a TLS socket and then run into all sort of unexpected corner cases. I have a vague recollection of Eric pointing this out to us a long time ago...
CVE-2025-37751
In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Avoid running off the end of an AMD erratum table The NULL array terminator at the end of erratum1386microcode was removed during the switch from x86cpudesc to x86cpuid. This causes readers to run off the end of the arra...
CVE-2025-23140
CVE-2025-23140 affects the Linux kernel PCI Endpoint Test driver. The issue arose when devm_request_irq() failed in pci_endpoint_test_request_irq(): some IRQs were not released, leaving /proc/irq entries and triggering a WARN in fs/proc/generic.c (remove_proc_entry). The root cause is that pci_en...
GHSA-45V9-W9FH-33J6 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GHSA-J639-M367-75CF vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GHSA-Q7RX-W656-FWMV vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GHSA-2549-XH72-QRPM vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GHSA-W88V-PJR8-CMV2 vulnerabilities
Vulnerabilities for packages: mattermost-fips...
GHSA-RC42-6C7J-7H5R vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, camunda-zeebe...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improperly typed vmddev::cfglock, which could lead to interrupt context issues...
No Secondary Node GUI Access, Intermittent issue due to /var over 100% Full
The graphical user interface GUI on the secondary system becomes unresponsive or inaccessible when the /var directory exceeds 100% disk utilization. This is primarily attributed to the /var/log/db/default/lbvserver folder occupying a high amount of storage space. Despite manual removal of files...
Oracle Linux 9 : kernel (ELSA-2025-4341)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-4341 advisory. - nvme-tcp: fix potential memory corruption in nvmetcprecvpdu Chris Leech RHEL-87479 CVE-2025-21927 - ipvs: properly dereference pe in ipvsaddservice...