Linux Distros Unpatched Vulnerability : CVE-2025-40277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could...

Linux Distros Unpatched Vulnerability : CVE-2025-40268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: client: fix memory leak in smb3fscontextparseparam The user calls fsconfig twice, but when the program exits, free only frees ctx-source for the second...

Linux Distros Unpatched Vulnerability : CVE-2025-40234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers Devices without the AWCC interface don't initialize awcc. Add a check before...

ufshcd Heap Buffer Overflow DoS

The vulnerability of the ufshcdremove function in the drivers/ufs/core/ufshcd.c file affects UFS-host controller support. In Linux operating systems, this vulnerability is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel ftrace DoS

The vulnerability in the kernel/trace/ftrace.c component of the Linux operating system is related to the use of resources with a similar identifier. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux iio/light/as73211.c DoS

The vulnerability of the iio/light/as73211.c component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux hid-asus.c DoS

The vulnerability of the hid-asus.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux Btrfs Component Compromise

The vulnerability of the fs/btrfs/qgroup.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux bpf_jit Heap Buffer Overflow DoS

The vulnerability of the bpfjit.c component in the Linux operating system is related to incorrect initialization of the resource. Exploiting this vulnerability allows an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2025-14104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function,...

Linux Distros Unpatched Vulnerability : CVE-2025-40259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: sg: Do not sleep in atomic context sgfinishremreq calls blkrqunmapuser. The latter function may sleep. Hence, call sgfinishremreq with interrupts enabled...

Linux Distros Unpatched Vulnerability : CVE-2025-40223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - most: usb: Fix use-after-free in hdmdisconnect hdmdisconnect calls mostderegisterinterface, which eventually unregisters the MOST interface device with...

Linux Distros Unpatched Vulnerability : CVE-2025-40231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock: fix lock inversion in vsockassigntransport Syzbot reported a potential lock inversion deadlock between vsockregistermutex and sklock-AFVSOCK when...

Linux Distros Unpatched Vulnerability : CVE-2025-40246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix out of bounds memory read error in symlink repair xfs/286 produced this report on my test fleet:...

Linux Distros Unpatched Vulnerability : CVE-2025-40261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: nvme-fc: Ensure -ioerrwork is cancelled in nvmefcdeletectrl nvmefcdeleteassocation waits for pending I/O to complete before returning, and an error can...

Linux Distros Unpatched Vulnerability : CVE-2025-41066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Horde Groupware v5.2.22 has a user enumeration vulnerability that allows an unauthenticated attacker to determine the existence of valid accounts on the system...

Linux Distros Unpatched Vulnerability : CVE-2025-40255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: core: prevent NULL deref in generichwtstampioctllower The ethtool tsconfig Netlink path can trigger a null pointer dereference. A call chain such as:...

Linux Distros Unpatched Vulnerability : CVE-2025-40265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vfat: fix missing sbminblocksize return value checks When emulating an nvme device on qemu with both logicalblocksize and physicalblocksize set to 8 KiB, but...

Linux Distros Unpatched Vulnerability : CVE-2025-40258

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: fix race condition in mptcpschedulework syzbot reported use-after-free in mptcpschedulework 1 Issue here is that mptcpschedulework schedules a work, the...

Linux Distros Unpatched Vulnerability : CVE-2025-14010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext...