5828 matches found
DEBIAN-CVE-2025-68788
In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special files inotify/fanotify do not allow users with no read access to a file to subscribe to events e.g. INACCESS/INMODIFY, but they do allow the same user to subscri...
DEBIAN-CVE-2025-68789
In the Linux kernel, the following vulnerability has been resolved: hwmon: ibmpex fix use-after-free in high/low store The ibmpexhighlowstore function retrieves driver data using devgetdrvdata and uses it without validation. This creates a race condition where the sysfs callback can be invoked...
DEBIAN-CVE-2025-68781
In the Linux kernel, the following vulnerability has been resolved: usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal The delayed work item otgevent is initialized in fslotgconf and scheduled under two conditions: 1. When a host controller binds to the OTG controller. 2...
DEBIAN-CVE-2025-68776
In the Linux kernel, the following vulnerability has been resolved: net/hsr: fix NULL pointer dereference in prpgetuntaggedframe prpgetuntaggedframe calls pskbcopy to create frame-skbstd but doesn't check if the allocation failed. If pskbcopy returns NULL, skbclone is called with a NULL pointer,...
DEBIAN-CVE-2025-68772
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid updating compression context during writeback Bai, Shuangpeng reported a bug as below: Oops: divide error: 0000 1 SMP KASAN PTI CPU: 0 UID: 0 PID: 11441 Comm: syz.0.46 Not tainted 6.17.0 1 PREEMPTfull Hardware...
DEBIAN-CVE-2025-68767
In the Linux kernel, the following vulnerability has been resolved: hfsplus: Verify inode mode when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 16bits "mode" field loaded from disk are corrupted. According to 1, the permissions...
MINI-WHC4-R64W-2HW4
Bulletin has no description...
DEBIAN-CVE-2026-0886
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...
The vulnerability of the software for managing, controlling, and organizing printing processes in Vasion Print Virtual Appliance Host and Print Application lies in the lack of authentication procedures, allowing attackers to execute arbitrary code.
The vulnerabilities of the Vasion Print Virtual Appliance Host and Print Application software for process management, control, and organization are related to deficiencies in authentication procedures. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code remote...
DEBIAN-CVE-2025-68468
Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they...
CGA-74PR-VH5Q-RW3H
Bulletin has no description...
CGA-2FFC-VQV2-M9XJ
Bulletin has no description...
CGA-2M2C-4PCF-3VCP
Bulletin has no description...
DEBIAN-CVE-2025-71063
Errands before 46.2.10 does not verify TLS certificates for CalDAV servers...
MINI-5XJF-29Q5-PM7V
Bulletin has no description...
CGA-CR8H-XRFH-CW2J
Bulletin has no description...
CGA-3894-FQXP-J83P
Bulletin has no description...
DEBIAN-CVE-2026-22701
filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of the filelock package. An attacker with local filesystem access and permission to create symlinks can exploit a race condition betwee...