Advisory ROSA-SA-2025-2645

software: binutils 2.38 WASP: ROSA-CHROME packageevrstring: binutils-2.38-4 CVE-ID: CVE-2023-1972 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Buffer overflow vulnerability in bfdselfslurpversiontables in bfd/self.c could cause loss of availability. CVE-STATUS: The vulnerability has been resolved...

NVIDIA GPU 资源管理错误漏洞

NVIDIA GPU is a graphics processing unit from NVIDIA, Inc. It is used in machine learning, video editing and gaming applications. NVIDIA GPUs are vulnerable to a resource management error vulnerability that stems from the inclusion of a vulnerability where referencing memory after freeing it coul...

openSUSE 15 Security Update : chromium (openSUSE-SU-2025:0034-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0034-1 advisory. - Chromium 132.0.6834.110 boo1236306 CVE-2025-0611: Object corruption in V8 CVE-2025-0612: Out of bounds memory access in V8 Tenable has extracte...

CVE-2024-54507

CVE-2024-54507 describes a type confusion in the Apple XNU kernel that could allow a user‑level attacker to read kernel memory. The issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2 through improved memory handling. Connected sources confirm the root cause as a type confusion in the ...

CVE-2024-26588

A flaw was found in the Linux kernel's implementation of the BPF JIT compiler for LoongArch CPUs. An instruction index is incorrectly calculated, leading to out-of-bounds memory access. This issue may allow an attacker with the privileges necessary to run BPF programs on systems with affected CPU...

CLSA-2025-1737993483 vim: Fix of CVE-2023-0049

CVE-2023-0049: fix invalid memory access with bad 'statusline' value...

OPENSUSE-SU-2025:0034-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 132.0.6834.110 boo1236306 CVE-2025-0611: Object corruption in V8 CVE-2025-0612: Out of bounds memory access in V8...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0034-1 Rating: important References: 1236306 Cross-References: CVE-2025-0611 CVE-2025-0612 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes two vulnerabilities is now available...

Fedora 40 : chromium (2025-5d89c826ff)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5d89c826ff advisory. Update to 132.0.6834.110 High CVE-2025-0611: Object corruption in V8 High CVE-2025-0612: Out of bounds memory access in V8 Tenable has extracted the...

PT-2025-22205

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the wifi component, specifically the ath12k driver. In the function ath12k dp mon srng process, an incorrect function ath12k hal srng src get next entry is used t...

Fedora 41 : chromium (2025-eb2f4a2306)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-eb2f4a2306 advisory. Update to 132.0.6834.110 High CVE-2025-0611: Object corruption in V8 High CVE-2025-0612: Out of bounds memory access in V8 Tenable has extracted the...

SUSE-SU-2025:0231-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53095: smb: client: Fix use-after-free of network namespace bsc1233642. - CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234853. -...

SUSE-SU-2025:0229-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver bsc1203332. - CVE-2022-48742: rtnetlink: make sure to refresh masterdev/mop...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix fortify source warning while accessing Eth segment CVE-2024-26907 In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev-desc-info instead of calling i3cdevicegetinfo to...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential deadlock on exfatgetdentryset CVE-2024-42315 In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev-desc-info instead of calling i3cdevicegetinfo to avoid deadlock...

Google Chrome Security Update (stable-channel-update-for-desktop_22-2025-01) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2025-0612

Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

AZL-56052 CVE-2025-0612 affecting package nodejs18 18.20.3-11

Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-0612

Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2025-0612

Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...