Linux Distros Unpatched Vulnerability : CVE-2025-38650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hfsplus: remove mutexlock check in hfsplusfreeextents Syzbot reported an issue in hfsplus filesystem: ------------ cut here ------------ WARNING: CPU: 0 PID: 44...

Linux Distros Unpatched Vulnerability : CVE-2025-21931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwpoison, memoryhotplug: lock folio before unmap hwpoisoned folio Commit b15c87263a69 hwpoison, memoryhotplug: allow hwpoisoned pages to be offlined add page...

PT-2025-35633

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error exists in the handleKeyGestureEvent function of PhoneWindowManager.java that may allow a lock screen bypass. Successful exploitation could lead to local privilege escalation...

Linux Distros Unpatched Vulnerability : CVE-2025-38058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final mntput from sync umount - raising mntcount after umount2 has...

Linux Distros Unpatched Vulnerability : CVE-2025-38666

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: appletalk: Fix use-after-free in AARP proxy probe The AARP proxyprobe routine aarpproxyprobenetwork sends a probe, releases the aarplock, sleeps, then...

The vulnerability of the nfs_get_lock_context function in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the nfsgetlockcontext function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2025-38584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - padata: Fix pd UAF once and for all There is a race condition/UAF in padatareorder that goes back to the initial commit. A reference count is taken at the start...

Linux Distros Unpatched Vulnerability : CVE-2025-38546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - atm: clip: Fix memory leak of struct clipvcc. ioctlATMARPMKIP allocates struct clipvcc and set it to vcc-userback. The code assumes that vccdestroysocket passes...

Linux Distros Unpatched Vulnerability : CVE-2025-38539

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the...

Linux Distros Unpatched Vulnerability : CVE-2022-49737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In X.Org X server 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by...

Linux Distros Unpatched Vulnerability : CVE-2022-28735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may bsc1139073 CVE-2024-36028: mm/hugetlb: fix DEBUGLOCKSWARNON1 when...

Linux Distros Unpatched Vulnerability : CVE-2021-3567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Carib...

Linux Distros Unpatched Vulnerability : CVE-2020-27837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a us...

Linux Distros Unpatched Vulnerability : CVE-2024-58238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test This fixes the tx timeout issue seen while running a stress test on btnxpuart for coupl...

New Android Hook Malware Variant Locks Devices With Ransomware

Zimperium's research reveals the Hook Android malware is now a hybrid threat, using ransomware and spyware to steal…...

SUSE CVE-2025-38632

In the Linux kernel, the following vulnerability has been resolved: pinmux: fix race causing muxowner NULL with active muxusecount commit 5a3e85c3c397 "pinmux: Use sequential access to access desc-pinmux data" tried to address the issue when two client of the same gpio calls pinctrlselectstate fo...

How a scam hunter got scammed (Lock and Code S06E17)

This week on the Lock and Code podcast… If there’s one thing that scam hunter Julie-Anne Kearns wants everyone to know, it is that no one is immune from a scam. And she would know—she fell for one last year. For years now, Kearns has made a name for herself on TikTok as a scam awareness and...

PT-2025-37977

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lockdep assertion issue was resolved in the net/mlx5 component of the Linux kernel. The issue occurred during a sync reset unload event when the PF already held the devlink lock while...

CVE-2025-38632

In the Linux kernel, the following vulnerability has been resolved: pinmux: fix race causing muxowner NULL with active muxusecount commit 5a3e85c3c397 "pinmux: Use sequential access to access desc-pinmux data" tried to address the issue when two client of the same gpio calls pinctrlselectstate fo...