Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an ATAPI device DMA issue in the patavia driver, which could cause the system to hang...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrect DMA cleanup in the wrong path, which could result in an invalid DMA address release...

CVE-2025-38269: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: btrfs: exit after state insertion failure at btrfsconvertextentbit If insertstate state failed it returns an error pointer and we call extentiotreepanic which will trigger a BUG call. However if CONFIGBUG is disabled, which is an...

PT-2025-29052

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the cs dsp firmware related to out-of-bounds memory access during a KUnit test ctl cache. The issue occurs in the cs dsp ctl cache init multiple...

EulerOS 2.0 SP10 : libxml2 (EulerOS-SA-2025-1783)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings because of an incorrec...

EulerOS 2.0 SP10 : libxml2 (EulerOS-SA-2025-1806)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings because of an incorrec...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an attempt to configure 36-bit DMA when the PCI device mmap is not set, which could result in a page fault...

kernel: mlxsw: spectrum_acl_erp: Fix object nesting warning

A flaw incorrect memory access in the Linux kernel Mellanox network Ethernet or RDMA device driver was found. A local user could use this flaw to crash the system...

CVE-2025-38243

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid inode pointer dereferences during log replay In a few places where we call readoneinode, if we get a NULL pointer we end up jumping into an error path, or fallthrough in case of addinoderef, where we then do...

CVE-2025-38261

CVE-2025-38261 affects the Linux kernel on riscv: the SR_SUM state must be saved/restored across task switches to prevent crashes under heavy load. The issue stems from put_user() in schedule_tail potentially clearing SR_SUM when a sleeping function is involved, risking kernel memory access fault...

CVE-2025-38243

The CVE-2025-38243 issue affects the Linux kernel’s Btrfs log replay path. In several locations that call read_one_inode(), a NULL inode pointer could be dereferenced (e.g., iput(&inode->vfs_inode) in __add_inode_ref()), causing an invalid memory access and a crash. The available connected doc...

CVE-2025-38243 btrfs: fix invalid inode pointer dereferences during log replay

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid inode pointer dereferences during log replay In a few places where we call readoneinode, if we get a NULL pointer we end up jumping into an error path, or fallthrough in case of addinoderef, where we then do...

CVE-2025-43580 Audition | Access of Memory Location After End of Buffer (CWE-788)

Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service. An attacker could leverage this vulnerability to crash the application or disrupt its functionality. Exploitation of this...

CVE-2025-43580 Audition | Access of Memory Location After End of Buffer (CWE-788)

Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service. An attacker could leverage this vulnerability to crash the application or disrupt its functionality. Exploitation of this...

jq: jq has signed integer overflow in jv.c:jvp_array_write

A flaw was found in jq, a command line JSON processor. An integer overflow can occur when attempting to assign a value using an array index of 2147483647 or when creating an array with 2147483647 elements, the maximum value for a 32-bit signed integer. This issue causes out-of-bounds memory acces...

jq: jq has signed integer overflow in jv.c:jvp_array_write

A flaw was found in jq, a command line JSON processor. An integer overflow can occur when attempting to assign a value using an array index of 2147483647 or when creating an array with 2147483647 elements, the maximum value for a 32-bit signed integer. This issue causes out-of-bounds memory acces...

jq: jq has signed integer overflow in jv.c:jvp_array_write

A flaw was found in jq, a command line JSON processor. An integer overflow can occur when attempting to assign a value using an array index of 2147483647 or when creating an array with 2147483647 elements, the maximum value for a 32-bit signed integer. This issue causes out-of-bounds memory acces...

CVE-2025-20982

Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

PT-2025-28497 · Adobe · Audition

Name of the Vulnerable Software and Affected Versions: Audition versions 25.2, 24.6.3 and earlier Description: The issue is an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service. An attacker could leverage this vulnerability to crash the...

Adobe Audition < 24.6.7 / 25.0 < 25.3 Application denial-of-service (APSB25-56)

The version of Adobe Audition installed on the remote Windows host is prior to 24.6.7, 25.3. It is, therefore, affected by a vulnerability as referenced in the APSB25-56 advisory. - Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer...