CVE-2025-38143 backlight: pm8941: Add NULL check in wled_configure()

In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wledconfigure devmkasprintf returns NULL when memory allocation fails. Currently, wledconfigure does not check for this case, which results in a NULL pointer dereference. Add NULL check after...

CVE-2025-38138 dmaengine: ti: Add NULL check in udma_probe()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Add NULL check in udmaprobe devmkasprintf returns NULL when memory allocation fails. Currently, udmaprobe does not check for this case, which results in a NULL pointer dereference. Add NULL check after devmkasprint...

CVE-2025-38122 gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO

In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for gveallocpendingpacket in TX DQO gveallocpendingpacket can return NULL, but gvetxaddskbdqo did not check for this case before dereferencing the returned pointer. Add a missing NULL check to prevent ...

AlmaLinux 9 : grub2 (ALSA-2025:6990)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:6990 advisory. grub2: reader/jpeg: Heap OOB Write during JPEG parsing CVE-2024-45774 grub2: commands/extcmd: Missing check for failed allocation CVE-2024-45775 grub2:...

PT-2025-30781 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential NULL pointer dereference issue was identified in the cs40l50 upload owt function. The function allocates memory using kmalloc without verifying successful allocation, which...

SUSE SLES15 Security Update : libgepub (SUSE-SU-2025:02213-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02213-1 advisory. - CVE-2025-6196: Fixed an integer overflow in the EPUB archive handling code that can leads to massive memory allocation and application crash...

The vulnerability of the Linux operating system’s kernel, related to the allocation of unlimited memory, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the mm/nommu.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mm/nommu.c component in the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE-SU-2025:02213-1 Security update for libgepub

This update for libgepub fixes the following issues: - CVE-2025-6196: Fixed an integer overflow in the EPUB archive handling code that can leads to massive memory allocation and application crash. bsc1244704...

The vulnerability of the drivers/firmware/EFI/libstub components of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/firmware/EFI/libstub components of the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DNS BIND server implementation of DoH, related to the allocation of unlimited memory, allows a attacker to cause a service failure.

The vulnerability of the DNS BIND server implementation related to the allocation of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the `__get_secs_required()` function in the fs/f2fs/segment.h component of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the getsecsrequired function in the fs/f2fs/segment.h component of the Linux kernel is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

EulerOS 2.0 SP13 : grub2 (EulerOS-SA-2025-1688)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw...

PT-2025-37214

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw related to file descriptor table allocations. When sysctl nr open is set to a very high value, processes attempting to use file descriptors near the...

PT-2025-35973

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the libiscsi component. Specifically, the iscsi conn-dd data field is initialized regardless of whether memory allocation succeeds. If ib fast reg...

ceph: RGW crash upon misconfigured CORS rule

A flaw was found in Ceph. Certain misconfigurations of CORS rules in Ceph could result in a significantly large memory allocation. This issue can lead to RGW crashing and a denial of service from an authenticated user on the network...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.53 bug fix and security update

Red Hat OpenShift Container Platform release 4.15.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

Security Bulletin: IBM Jazz for Service Management is vulnerable due to Apache ActiveMQ Memory Allocation with Excessive Size Value vulnerability

Summary IBM Jazz for Service Management is vulnerable due to Apache ActiveMQ Memory Allocation with Excessive Size Value vulnerability CVE-2025-27533 Vulnerability Details CVEID:CVE-2025-27533 DESCRIPTION: Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ. During...

UBUNTU-CVE-2025-5449

A flaw was found in the SFTP server message decoding logic of libssh. The issue occurs due to an incorrect packet length check that allows an integer overflow when handling large payload sizes on 32-bit systems. This issue leads to failed memory allocation and causes the server process to crash,...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to incorrect validity check in the sftpdecodechanneldatatopacket function. An attacker can cause the server to crash by sending specially crafted SFTP packets with payload size field set to value...