SUSE CVE-2025-40272

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file created with memfdsecret2, the kernel will allocate a new folio for it, mark the underlying page as not-present in the direct...

PT-2025-49484

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the lpfc module related to memory mapping in the lpfc sli4 pci mem setup function. Specifically, when if type is zero and pci resource startpdev...

Fixed in Apache Tomcat 11.0.15

Low: Security constraint bypass CVE-2026-24733 Tomcat did not limit HTTP/0.9 requests to the GET method. If a security constraint was configured to allow HEAD requests to a URI but deny GET requests, the user could bypass that constraint on GET requests by sending a specification invalid HEAD...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a zero-length mapping allowed by the pciendpointtest driver, which could lead to a kernel crash...

PT-2025-49483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to memory mapping within the DRM/AMD/display subsystem. The problem involves mapping to a non-allocated memory location, specifically an...

Linux Distros Unpatched Vulnerability : CVE-2022-50614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - misc: pciendpointtest: Fix pciendpointtestcopy,write,read panic The dmamapsingle doesn't permit zero length mapping. It causes a follow panic. A panic was...

PT-2025-49455

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc1rpci-dev+ 237 Description The Linux kernel contained a flaw in the pci endpoint test module where the dma map single function did not properly handle zero-length mappings, leading to a potential kernel...

Linux Distros Unpatched Vulnerability : CVE-2025-40311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled, dmaalloccoherent with GFPUSER may return addresses from the...

Linux Distros Unpatched Vulnerability : CVE-2023-53753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: fix mapping to non-allocated address Why There is an issue mapping non-allocated location of memory. It would allocate gpio registers from an...

PT-2025-49456

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak exists in the snr uncore mmio map function within the perf/x86/intel/uncore module of the Linux kernel. The pci get device function increases the reference count f...

CVE-2025-40272

A use-after-free race condition was found in the secretmem subsystem of the Linux kernel. When two tasks concurrently fault on the same page in a memfdsecret file, the losing task may free its folio before restoring the direct map entry. This allows the freed page to be reallocated while still...

CVE-2025-40276 drm/panthor: Flush shmem writes before mapping buffers CPU-uncached

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached The shmem layer zeroes out the new pages using cached mappings, and if we don't CPU-flush we might leave dirty cachelines behind, leading to potential data leaks...

CVE-2025-40276

CVE-2025-40276 affects the Linux kernel Panthor DRM driver (drivers/gpu/drm/panthor/panthor_gem.c). The vulnerability arises from flushing shmem writes before mapping buffers; shmem currently zeroes new pages using cached mappings and, without a CPU flush, can leave dirty cachelines behind. This ...

CVE-2025-40276 drm/panthor: Flush shmem writes before mapping buffers CPU-uncached

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached The shmem layer zeroes out the new pages using cached mappings, and if we don't CPU-flush we might leave dirty cachelines behind, leading to potential data leaks...

CVE-2025-40230

In the Linux kernel, the following vulnerability has been resolved: mm: prevent poison consumption when splitting THP When performing memory error injection on a THP Transparent Huge Page mapped to userspace on an x86 server, the kernel panics with the following trace. The expected behavior is to...

CVE-2025-40250

CVE-2025-40250 affects the Linux kernel mlx5 driver (net/mlx5) where mlx5_irq_alloc() could incorrectly free the entire rmap on a request_irq() failure, causing a crash if other threads access it. The fix changes cleanup to remove only the specific IRQ mapping added for the failed allocation, pre...

CVE-2025-40250 net/mlx5: Clean up only new IRQ glue on request_irq() failure

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clean up only new IRQ glue on requestirq failure The mlx5irqalloc function can inadvertently free the entire rmap and end up in a crash1 when the other threads tries to access this, when requestirq fails due to exhauste...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from nios2 not setting memblock.currentlimit correctly, which could lead to memory mapping out-of-bounds...

ROS-20251203-11

Vulnerability of parse.ParseUnverified function of golang-jwt web token library of Go programming language is related to uncontrolled resource consumption. Go programming language is related to uncontrolled resource consumption. Exploitation of the vulnerability allows an attacker acting remotely...

ROS-20251203-10

Vulnerability of parse.ParseUnverified function of golang-jwt web token library of Go programming language is related to uncontrolled resource consumption. Go programming language is related to uncontrolled resource consumption. Exploitation of the vulnerability allows an attacker acting remotely...