CVE-2023-53801

CVE-2023-53801 concerns a Linux kernel issue in the iommu/sprd driver where a DMA buffer used for address mapping is not released when an IOMMU domain is freed, causing a memory leak. The provided description from the initial document states that the vulnerability was resolved by releasing the DM...

CVE-2022-50647 RISC-V: Make port I/O string accessors actually work

In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O string accessors such as insb', outsb', etc. which use the physical PCI port I/O address rather than the corresponding memory mapping to get at the requested...

CVE-2022-50647 RISC-V: Make port I/O string accessors actually work

In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually work Fix port I/O string accessors such as insb', outsb', etc. which use the physical PCI port I/O address rather than the corresponding memory mapping to get at the requested...

PT-2025-49679

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the AMDGPU graphics driver where the offset in bo parameter in the drm amdgpu gem va handler is not sufficiently validated. An addition of offset in bo and map size can...

Linux Distros Unpatched Vulnerability : CVE-2025-40334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: validate userq buffer virtual address and size It needs to validate the userq object virtual address to determine whether it is residented in a vali...

PT-2025-49627

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc2-00283-g10d4879f9ef0-dirty Description The Linux kernel had an issue where port I/O string accessors, such as insb and outsb, did not function correctly. These accessors used the physical PCI port I/O...

CVE-2025-40334: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq buffer virtual address and size It needs to validate the userq object virtual address to determine whether it is residented in a valid vm mapping...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper use of hmmpfntomaporder, which could lead to memory mapping errors...

CVE-2025-40336: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: fix hmmpfntomaporder usage Handle the case where the hmm range partially covers a huge page like 2M, otherwise we can potentially end up doing something nasty like mapping memory which is outside the range, and maybe...

Linux Distros Unpatched Vulnerability : CVE-2025-40336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gpusvm: fix hmmpfntomaporder usage Handle the case where the hmm range partially covers a huge page like 2M, otherwise we can potentially end up doing...

CVE-2025-40311

In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled, dmaalloccoherent with GFPUSER may return addresses from the vmalloc range. If such an address is mapped without VMMIXEDMAP,...

otanalytics (>=0.5.4, <=0.6.14), synth-mapping-helper (1.5.10) potentially affected by CVE-2025-66470 via nicegui (2.11.0)

nicegui PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - otanalytics =0.5.4, =0.6.14 - synth-mapping-helper 1.5.10 Source cves: CVE-2025-66470 Source advisory: OSV:GHSA-2M4F-CG75-76W2...

mcp-open-client (0.4.27), synth-mapping-helper (>=1.5.16, <=1.5.18) potentially affected by CVE-2025-66470 via nicegui (2.21.1)

nicegui PYPI version 2.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - mcp-open-client 0.4.27 - synth-mapping-helper =1.5.16, =1.5.18 Source cves: CVE-2025-66470 Source advisory: OSV:GHSA-2M4F-CG75-76W2...

flinventory-gui (>=0.10.0, <=0.11.1), synth-mapping-helper (1.5.11) +1 more potentially affected by CVE-2025-66470 via nicegui (2.12.1)

nicegui PYPI version 2.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - flinventory-gui =0.10.0, =0.2.0, =0.2.11 Source cves: CVE-2025-66470 Source advisory: OSV:GHSA-2M4F-CG75-76W2...

synth-mapping-helper (1.5.8) potentially affected by CVE-2025-66470 via nicegui (2.7.0)

nicegui PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.5.8 Source cves: CVE-2025-66470 Source advisory: OSV:GHSA-2M4F-CG75-76W2...

synth-mapping-helper (>=1.5.13, <=1.5.14) potentially affected by CVE-2025-66470 via nicegui (2.18.0)

nicegui PYPI version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper =1.5.13, =1.5.14 Source cves: CVE-2025-66470 Source advisory: OSV:GHSA-2M4F-CG75-76W2...

synth-mapping-helper (1.4.7) potentially affected by CVE-2025-66470 via nicegui (1.4.30)

nicegui PYPI version 1.4.30 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.4.7 Source cves: CVE-2025-66470 Source advisory: OSV:GHSA-2M4F-CG75-76W2...

synth-mapping-helper (1.5.9) potentially affected by CVE-2025-66470 via nicegui (2.8.1)

nicegui PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.5.9 Source cves: CVE-2025-66470 Source advisory: OSV:GHSA-2M4F-CG75-76W2...

otanalytics (>=0.6.15, <=0.7.5), synth-mapping-helper (1.5.19) potentially affected by CVE-2025-66470 via nicegui (2.24.1)

nicegui PYPI version 2.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - otanalytics =0.6.15, =0.7.5 - synth-mapping-helper 1.5.19 Source cves: CVE-2025-66470 Source advisory: OSV:GHSA-2M4F-CG75-76W2...

synth-mapping-helper (1.5.15) potentially affected by CVE-2025-66470 via nicegui (2.19.0)

nicegui PYPI version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - synth-mapping-helper 1.5.15 Source cves: CVE-2025-66470 Source advisory: OSV:GHSA-2M4F-CG75-76W2...