Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a vCPU creation contention condition during SEV migration that could lead to a crash...

CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

CVE-2025-54566

Astra Linux advisory describes a QEMU vulnerability affecting versions 7.1.0 through 8.2.1 where register_vfs mishandles the NumVFs vs TotalVFs, causing a buffer overflow in VF implementations. This is related to CVE-2024-26327. The connected document provides the concrete root cause and affected...

QEMU 安全漏洞

QEMU Quick Emulator is a suite of simulation processor software by Fabrice Bellard, an individual developer in France. The software is fast and cross-platform. A security vulnerability exists in QEMU 10.0.3 and earlier versions, which stems from inconsistent migration states...

CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

CVE-2025-54566: External Control of Critical State Data

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

PT-2025-36294

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc5-mm-new-damon+ 93 Description The Linux kernel contains a flaw in mm/damon/ops-common.c where the damon migrate pages function attempts page migration even if the target node is invalid. This can occur...

CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

CVE-2025-54566

hw/pci/pciesriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327...

PT-2025-37213

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists between smaps hugetlb range and page migration within the kernel’s memory management subsystem. Specifically, smaps hugetlb range accesses page table entries pt...

SUSE-SU-2025:02478-1 Security update 5.0.5 for Multi-Linux Manager Server

This update fixes the following issues: server-attestation-image: - Version 5.0.11: Fixed the health check of the container bsc1240604 server-hub-xmlrpc-api-image: - Version 5.0.13: Image rebuilt to the newest version with updated dependencies server-image: - Version 5.0.16: Fixed...

PT-2025-54869

This update fixes the following issues: server-attestation-image: - Version 5.0.11: Fixed the health check of the container bsc1240604 server-hub-xmlrpc-api-image: - Version 5.0.13: Image rebuilt to the newest version with updated dependencies server-image: - Version 5.0.16: Fixed...

WordPress FG Drupal to WordPress Cross-Site Request Forgery Vulnerability

WordPress FG Drupal to WordPress is a plugin tool for migrating Drupal website content to WordPress, which supports the import of basic content such as articles, images, etc., but the free version does not include the comment import function. WordPress FG Drupal to WordPress suffers from a...

kernel: mm/huge_memory: fix dereferencing invalid pmd migration entry

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix dereferencing invalid pmd migration entry When migrating a THP, concurrent access to the PMD migration entry during a deferred split scan can lead to an invalid address access, as illustrated below. To prevent...

Virtuozzo Hybrid Infrastructure 7.0 Hotfix 2 (7.0.0-253)

This update provides a stability fix. Vulnerability id: VSTOR-110793 A stability fix for VM live migration...

RUSTSEC-2025-0172 `zip-extract` is unmaintained; use the `zip >= 2.4.0` crate instead

The zip-extract crate has been explicitly deprecated by its author on Jul 16, 2025, and the repository was archived on Sep 8, 2025. The author added deprecation notices README stating that the functionality is now available directly in the zip crate via ZipArchive::extract available since zip 0.6...

WordPress plugin FG Drupal to WordPress 代码问题漏洞

WordPress FG Drupal to WordPress is a plugin tool for migrating Drupal website content to WordPress, which supports the import of basic content such as articles, images, etc., but the free version does not include the comment import function. WordPress FG Drupal to WordPress suffers from a...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen that stems from...

PT-2025-30721

Name of the Vulnerable Software and Affected Versions: QEMU versions through 10.0.3 QEMU version 7.2+dfsg-7+deb12u15 QEMU version 10.0.2+ds-2+deb13u1 Description: QEMU contains a migration state inconsistency related to SR-IOV. Additionally, the update removes the usage of the C Credential flag f...