CVE-2025-68231

CVE-2025-68231 concerns the Linux kernel mempool poisoning of HIGHMEM pages. The root cause reported is that the poisoning code did not handle CONFIG_HIGHMEM correctly: only the first page is mapped, but the code may access the rest of the high-order page, leading to a crash (as shown by the prov...

CVE-2025-68231 mm/mempool: fix poisoning order>0 pages with HIGHMEM

In the Linux kernel, the following vulnerability has been resolved: mm/mempool: fix poisoning order0 pages with HIGHMEM The kernel test has reported: BUG: unable to handle page fault for address: fffba000 PF: supervisor write access in kernel mode PF: errorcode0x0002 - not-present page pde =...

CVE-2025-68231 mm/mempool: fix poisoning order>0 pages with HIGHMEM

In the Linux kernel, the following vulnerability has been resolved: mm/mempool: fix poisoning order0 pages with HIGHMEM The kernel test has reported: BUG: unable to handle page fault for address: fffba000 PF: supervisor write access in kernel mode PF: errorcode0x0002 - not-present page pde =...

Linux Distros Unpatched Vulnerability : CVE-2025-68231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/mempool: fix poisoning order0 pages with HIGHMEM The kernel test has reported: BUG: unable to handle page fault for address: fffba000 PF: supervisor write...

PT-2025-51644

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc2-00031-gec7f31b2a2d3 Description The Linux kernel contains a flaw within the mm/mempool component related to handling page poisoning, specifically when dealing with CONFIG HIGHMEM. The issue arises...

SUSE CVE-2023-53832

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref in raid10syncrequest initresync inits mempool and sets conf-havereplacemnt at the beginning of sync, closesync frees the mempool when sync is completed. After 1 recovery might be skipped and initresy...

CVE-2023-53832

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref in raid10syncrequest initresync inits mempool and sets conf-havereplacemnt at the beginning of sync, closesync frees the mempool when sync is completed. After 1 recovery might be skipped and initresy...

UBUNTU-CVE-2023-53832

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix null-ptr-deref in raid10syncrequest initresync inits mempool and sets conf-havereplacemnt at the beginning of sync, closesync frees the mempool when sync is completed. After 1 recovery might be skipped and initresy...

PT-2025-49723

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's md/raid10 component, specifically within the raid10 sync request function. The issue involves a null pointer dereference that can occur when recovery ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988956)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988956 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO dmiodecpending calls endioacct first and wil...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989054)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989054 advisory. In the Linux kernel, the following vulnerability has been resolved: NFS: Avoid writeback threads getting stuck in mempoolalloc In a low memory situation, allow the N...

PT-2025-43695

Name of the Vulnerable Software and Affected Versions Bitcoin Core affected versions not specified Description The software contains an issue that requires the victim to run it on an old 32-bit system and to have configured a large, non-standard mempool. An attacker must then craft an invalid 1 G...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987613)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987613 advisory. In the Linux kernel, the following vulnerability has been resolved: NFS: Avoid writeback threads getting stuck in mempoolalloc In a low memory situation, allow the N...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987051)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987051 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO dmiodecpending calls endioacct first and wil...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986338 advisory. In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO dmiodecpending calls endioacct first and wil...

EUVD-2025-4581

Malicious code in bioql PyPI...

EUVD-2022-55190

Malicious code in bioql PyPI...

EUVD-2025-4580

Malicious code in bioql PyPI...

EUVD-2023-2155

Malicious code in bioql PyPI...

DEBIAN-CVE-2022-50381

In the Linux kernel, the following vulnerability has been resolved: md: fix a crash in mempoolfree There's a crash in mempoolfree when running the lvm test shell/lvchange-rebuild-raid.sh. The reason for the crash is this: superwritten calls atomicdecandtest&mddev-pendingwrites and...