Linux Distros Unpatched Vulnerability : CVE-2025-38211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 iwcm: free cmid resources on the last deref simplified cmid resourc...

Linux Distros Unpatched Vulnerability : CVE-2017-9725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets...

Linux Distros Unpatched Vulnerability : CVE-2021-47614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix a user-after-free in addpbleprm When irdmahmcsdone fails, 'chunk' is freed...

libxml2: Out-of-Bounds Read in libxml2

A flaw was found in libxml2. This vulnerability allows out-of-bounds memory access due to incorrect handling of return values in xmlPythonFileRead and xmlPythonFileReadRaw. This is caused by a mismatch between the length of the file in bytes vs the length in characters, as unicode characters can...

spi-rockchip: Fix register out of bounds access

...

RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

...

RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction

...

Linux Distros Unpatched Vulnerability : CVE-2025-22089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Don't expose hwcounters outside of init net namespace Commit 467f432a521a...

Linux Distros Unpatched Vulnerability : CVE-2025-37877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu: Clear iommu-dma ops on cleanup If iommudeviceregister encounters an error, it can end...

Linux Distros Unpatched Vulnerability : CVE-2023-52980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: block: ublk: extending queuesize to fix overflow When validating drafted SPDK ublk target, i...

PT-2025-35991

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of cloned GSO Generic Segmentation Offload packets within the SCTP Stream Control Transmission Protocol stack. Specifically, a...

Linux Distros Unpatched Vulnerability : CVE-2022-49948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vt: Clear selection before changing the font When changing the console font with ioctlKDFONTOP the new font size can be bigger than the previous font. A previou...

Linux Distros Unpatched Vulnerability : CVE-2025-38341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-map FW msg The semantics are that caller o...

Linux Distros Unpatched Vulnerability : CVE-2022-21814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may...

CVE-2025-7771

ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke...

Vulnerabilities fixed in Rockwell Automation Arena

Rockwell Automation has fixed vulnerabilities in Arena Simulation. The vulnerabilities are in the way Arena Simulation processes files, with this it is possible to manipulate and read memory. The vulnerabilities allow malicious actors to reveal sensitive information and execute arbitrary code whe...

firmware: arm_ffa: Set dma_mask for ffa devices

...

CVE-2025-21018

Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory...

CVE-2025-54633

Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

TechPowerUp ThrottleStop security vulnerability

TechPowerUp ThrottleStop is a software for monitoring and tuning CPU performance from TechPowerUp, Inc. A security vulnerability exists in TechPowerUp ThrottleStop version 3.0.0.0 that originates from allowing physical memory reads and writes, which could result in elevated privileges...