106 matches found
USN-8121-1 linux-aws-fips vulnerability
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...
The vulnerabilities of the functions __msc_buffer_win_free() and msc_buffer_get_page() in the driver/hwtracing/intel_th/msu.c module of the Linux kernel’s hardware tracing driver allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions mscbufferwinfree and mscbuffergetpage in the drivers/hwtracing/intelth/msu.c module of the Linux kernel’s hardware tracing driver is related to insufficient data validation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the `nvmeTraceBioComplete()` function in the Linux kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the nvmeTraceBioComplete function in the Linux kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the ath5k_eeprom_convert_pcal_info_5111() function in the drivers/net/wireless/ath/ath5k/eeprom.c module – a driver for Atheros/Qualcomm wireless adapter support in Linux operating systems – allows an attacker to access protected information or cause service failure.
The vulnerability of the ath5keepromconvertpcalinfo5111 function in the drivers/net/wireless/ath/ath5k/eeprom.c module – a driver for Atheros/Qualcomm wireless adapter support in Linux operating systems – involves reading data beyond the buffer boundaries. Exploiting this vulnerability could allo...
The vulnerability of the sata_pmp_init_links() function in the drivers/ata/libata-pmp.c kernel module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the satapmpinitlinks function in the drivers/ata/libata-pmp.c kernel module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protect...
The vulnerability of the `__drm_kunit_helper_alloc_drm_device()` function in the Linux kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the drmkunithelperallocdrmdevice function in the Linux kernel module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the `ucsi_read_message_in()` function in the `drivers/usb/typec/ucsi/ucsi.c` file of the UCSI driver module allows a malicious actor to cause a service failure within the Linux operating system’s USB Type-C interface support framework.
The vulnerability of the ucsireadmessagein function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI driver module exposes the system’s software interface for the USB Type-C port in the Linux kernel. This vulnerability allows an attacker to cause a service failure...
The vulnerability of the xfrm_state_delete_tunnel() function in the net/xfrm/xfrm_state.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xfrmstatedeletetunnel function in the net/xfrm/xfrmstate.c module of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2025-33219
NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or informatio...
CVE-2025-33219
CVE-2025-33219 affects the NVIDIA Display Driver for Linux and its kernel module. The vulnerability is an integer overflow/wraparound in the NVIDIA kernel module, which could lead to code execution, privilege escalation, data tampering, DoS, or information disclosure. The CVSS indicates local acc...
Security Bulletin: NVIDIA GPU Display Drivers - January 2026
NVIDIA has released a software security update for NVIDIA GPU Display Driver to address the issues that are disclosed in this bulletin. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software and Cloud Gaming updates,...
ROS-20260113-7312
A vulnerability in the navi10issupportfinegraineddpm function in the drivers/gpu/drm/amd/pm/swsmu/smu11/navi10ppt.c module of the amdpgu driver of the Linux kernel is related to incorrect index calculation. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integri...
Linux Distros Unpatched Vulnerability : CVE-2023-53999
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: TC, Fix internal port memory leak The flow rule can be splited, and the extra postact rules are added to postact table. It's possible to trigger...
The vulnerability of the stop_kthread() function in the kernel module trace/trace_osnoise.c of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the stopkthread function in the kernel module trace/traceosnoise.c of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the gfs2_gl_hash_clear() function in the fs/gfs2/glock.c module allows a hacker to cause a service failure in the Linux operating system’s GFS2 file system.
The vulnerability of the gfs2glhashclear function in the fs/gfs2/glock.c module of the GFS2 file system support in Linux’s operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nr_heartbeat_expiry() function in the net/netrom/nr_timer.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the nrheartbeatexpiry function in the net/netrom/nrtimer.c module of the Linux operating system is related to the lack of memory release after the effective expiration time. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `destroy_cq_user()` function in the drivers/infiniband/hw/mlx5/cq.c driver of the Linux operating system’s InfiniBand kernel module allows a malicious actor to cause a service failure.
The vulnerability of the destroycquser function in the drivers/infiniband/hw/mlx5/cq.c driver of the Linux operating system’s InfiniBand support module is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
Amazon Linux 2023 : nvidia-open (ALAS2023NVIDIA-2025-243)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023NVIDIA-2025-243 advisory. NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalatio...
The vulnerability of the mptcp_skb_can_collapse_to() function in the net/mptcp/protocol.c module of the MTCP protocol implementation in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mptcpskbcancollapseto function in the net/mptcp/protocol.c module of the MTCP protocol implementation in the Linux operating system is related to the use of already allocated memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
