830 matches found
CVE-2024-39707
Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version...
CVE-2021-41223
TensorFlow is an open source platform for machine learning. In affected versions the implementation of FusedBatchNorm kernels is vulnerable to a heap OOB access. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow 2.5.2, and TensorFlow...
CVE-2023-54160
The CVE-2023-54160 entry corresponds to a Linux kernel vulnerability where firmware: arm_sdei triggered a sleep-from-invalid-context BUG on preempt-rt kernels (Ampere Altra). The crash is tied to cpuhp hotplug paths and SDEI callbacks executed with interrupts disabled, with reports that cpuhp_up ...
CVE-2023-54135 maple_tree: fix potential out-of-bounds access in mas_wr_end_piv()
In the Linux kernel, the following vulnerability has been resolved: mapletree: fix potential out-of-bounds access in maswrendpiv Check the write offset end bounds before using it as the offset into the pivot array. This avoids a possible out-of-bounds access on the pivot array if the write extend...
PT-2025-52929
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.0 1 Description The Linux kernel contained an issue where the convert context function, called within a critical section, could potentially cause a process to sleep while allocating memory using GFP KERNEL...
PT-2025-53212
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s maple tree implementation, specifically within the mas wr end piv function. The issue involves a potential out-of-bounds access when determining the...
The vulnerability of the perf_output_begin component in Linux operating system kernels allows attackers to compromise the confidentiality of protected information.
The vulnerability of the perfoutputbegin component in Linux operating systems involves reading memory beyond the allocated buffer. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality of the protected information...
CVE-2025-25216
Improper input validation in some firmware for some IntelR Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...
CVE-2025-25216
Improper input validation in some firmware for some IntelR Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...
CVE-2025-25216
CVE-2025-25216 involves improper input validation in Intel graphics firmware and Intel LTS kernels within Ring 1: Device Drivers, enabling a local, low-complexity DoS by an authenticated, unprivileged user. Red Hat and ENISA entries confirm the same issue affecting Intel Arc graphics family and r...
kernel: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels
In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smpprocessorid call trace for preemptible kernels Correct kernel call trace when calling smpprocessorid when called in preemptible kernels by using rawsmpprocessorid. smpprocessorid checks to see if preemption...
kernel: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels
In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smpprocessorid call trace for preemptible kernels Correct kernel call trace when calling smpprocessorid when called in preemptible kernels by using rawsmpprocessorid. smpprocessorid checks to see if preemption...
CVE-2025-25216: Improper Input Validation
Improper input validation in some firmware for some IntelR Graphics Drivers and Intel LTS kernels within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...
The vulnerability of the void() function in the kernel/rcu/tasks.h module of the synchronization subsystem in Linux multi-threaded kernel systems allows a attacker to cause a service failure.
The vulnerability of the void function in the kernel/rcu/tasks.h module of the synchronization subsystem in Linux multi-threaded kernel systems is related to the execution of operations outside of the memory buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990295)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990295 advisory. In the Linux kernel, the following vulnerability has been resolved: filelock: Fix fcntl/close race recovery compat path When I wrote commit 3cad1bc01041 filelock:...
EUVD-2017-7732
Malware in sbrugna...
EUVD-2019-6250
Malware in sbrugna...
EUVD-2014-0278
Malware in sbrugna...