ghostscript security update

An update is available for ghostscript. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PDF...

The vulnerability in the driver/modules/usb/chipidea/udc.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/usb/chipidea/udc.c module of Linux operating systems is related to incorrect operation of the USB interface. This occurs regardless of whether the USB device controller is disabled, due to improper locking of resources. Exploiting this vulnerability can allow an...

The vulnerability of the __inode_add_ref() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the inodeaddref function in the Linux operating system is related to incorrect initialization of the resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the netfs_collect_in_app() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the netfscollectinapp function in the Linux operating system is related to an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cs40l50Upload_OWT() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cs40l50UploadOWT function in the Linux operating system is related to a pointer swapping error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Azure Linux 3.0 Security Update: redis / valkey (CVE-2025-32023)

The version of redis / valkey installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32023 advisory. - Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5,...

The vulnerability of the carl9170_usb_rx_complete() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the carl9170usbrxcomplete function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

DEBIAN-CVE-2025-38471

In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock After recent changes in net-next TCP compacts skbs much more aggressively. This unearthed a bug in TLS where we may try to operate on an old skb when checking if all skbs in the que...

The vulnerability of the mt76_dma_cleanup() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mt76dmacleanup function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the f2fs_new_node_page() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the f2fsnewnodepage function in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the icl_update_topdown_event() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the iclupdatetopdownevent function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `atomctrl_initialize_mc_reg_table()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the atomctrlinitializemcregtable function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bpf_iter_scx_dsq_new() function in the sched_ext component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the bpfiterscxdsqnew function in the schedext component of the Linux operating system lies in the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the io_bitmap_exit() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the iobitmapexit function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the `create_validate_stream_for_sink()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the createvalidatestreamforsink function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android

This repository contains a PoC Proof of Concept code for the BlueBorne vulnerabilities. The BlueBorne vulnerabilities are a set of vulnerabilities in Bluetooth devices that allow an attacker to remotely execute code on a device. The PoC code is written in Python and uses the PyBluez library to...

NewStart CGSL MAIN 7.02 : util-linux Vulnerability (NS-SA-2025-0198)

The remote NewStart CGSL host, running version MAIN 7.02, has util-linux packages installed that are affected by a vulnerability: - wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. Specifically...

The vulnerability of the regs_get_kernel_stack_nth() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the regsgetkernelstacknth function in the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the k3_udma_glue_reset_rx_chn() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the k3udmaglueresetrxchn function in Linux operating systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-6018

A Local Privilege Escalation LPE vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules PAM. This flaw allows an unprivileged local attacker for example, a user logged in via SSH to obtain the elevated privileges normally reserved for a physically present,...