CVE-2026-32848: Double Free

NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodevop within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier on SMP systems. Attackers can exploit...

CVE-2026-31705: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2getea EA alignment smb2getea applies 4-byte alignment padding via memset after writing each EA entry. The bounds check on buffreelen is performed before the value memcpy, but the alignment...

CVE-2026-31664: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfrm: clear trailing padding in buildpolexpire buildexpire clears the trailing padding bytes of struct xfrmuserexpire after setting the hard field via memsetafter, but the analogous function buildpolexpire does not do this for...

EUVD-2013-3886

Malware in sbrugna...

EUVD-2016-6788

Malware in sbrugna...

EUVD-2010-2959

Malware in sbrugna...

EUVD-2025-7902

Malicious code in bioql PyPI...

EUVD-2024-54154

Malicious code in bioql PyPI...

CVE-2025-21595: Missing Release of Memory after Effective Lifetime

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause an FPC to crash, leading to Denial of Service DoS. On all Junos OS and Junos OS Evolved...

CVE-2025-0835

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory...

CVE-2025-0835

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory...

CVE-2025-0835 GPU DDK - _WrapExtMemReleasePages called twice if _FlushUMVirtualRange fails

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory...

CVE-2025-0835

A vulnerability exists in Imagination Technologies microprogramming software for PowerVR-GPU components, where a Use After Free (CWE-416) condition occurs. Specifically, the function _WrapExtMemReleasePages may be called twice if _FlushUMVirtualRange fails. A non-privileged user can exploit this ...

CVE-2025-0835 GPU DDK - _WrapExtMemReleasePages called twice if _FlushUMVirtualRange fails

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory...

PT-2025-12567

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. Recommendations At the moment, there is no information about a newer...

CVE-2024-12837

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory...

CVE-2024-12837

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory...

PT-2025-10051

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, potentially corrupting kernel heap memory. Recommendations At the moment, there is no...

CVE-2025-0662

In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace dumps a variable-sized sockaddr to userspace. There, the full sockaddr is copied, even when it is shorter than the full size. This can result in up to 14 uninitialized bytes of...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-3028)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3028 advisory. - A race condition was found in the Linux kernel's IP framework for transforming packets XFRM subsystem when...