Last-Level Cache Attack

AMD ID: AMD-SB-7032 Potential Impact: N/A Severity: N/A Summary Researchers from Wuhan University have provided AMD with a paper titled “ZenLeak: Practical Last-Level Cache Side-Channel Attacks on AMD Zen Processors” in which they discuss prime and probe attacks targeting the Last-Level Cache LLC...

Exploit for Type Confusion in Google Chrome

CVE-2022-4174CVE-2022-41742 PoC para CVE-2022-4174CVE-2022-4...

RealTek SD Card Reader Vulnerabilities - Lenovo Support US

No description provided...

NVIDIA GPU Display Driver - January 2025 - Lenovo Support US

No description provided...

Lenovo Vantage Privilege Escalation Vulnerability - Lenovo Support US

No description provided...

Intel VPL Software and Graphics Drivers Advisory - Lenovo Support US

No description provided...

CVE-2025-21692

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan found that etsclassfromarg can index an Out-Of-Bound class in etsclassfromarg when passed clid of 0. The overflow may cause local privilege escalation. 18.852298 ------------ cut...

CVE-2025-24032

A flaw was found in the pampkcs11 Linux-PAM login module. If the certpolicy is set to none, which is the default value, then pampkcs11 will only check if the user is capable of logging into the token. This flaw allows an attacker to create a different token with the user's public data, for exampl...

CVE-2025-1149

A flaw was found in GNU Binutils. This vulnerability allows a memory leak via the xstrdup function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicabilit...

CVE-2025-1147

A flaw was found in GNU Binutils nm component. This vulnerability allows a buffer overflow via manipulation of the const argument. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of u...

CVE-2025-24031

A flaw was found in the pampkcs11 Linux-PAM login module. A segmentation fault condition may be triggered in certain versions when a user presses ctrl-c/ctrl-d when asked for a PIN. When a user does not enter a PIN, pamgetpwd will never initialize the password buffer pointer, and cleanse will try...

CVE-2025-25247

A flaw was found in the Apache Felix Webconsole. This vulnerability allows Cross-site Scripting XSS via improper neutralization of input during web page generation. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CGA-285G-XPR3-78GW

Bulletin has no description...

podman: buildah: Container breakout by using --jobs=2 and a race condition when building a malicious Containerfile

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42240)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42240 advisory. - In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler du...

CVE-2025-25183

A flaw was found in the vllm package. Maliciously constructed statements can lead to hash collisions, resulting in cache reuse, which can interfere with subsequent responses and cause unintended behavior. The impact of a collision would be using a cache that was generated using different content...

CGA-92QJ-V8G8-FXCM

Bulletin has no description...

CVE-2025-0725

A flaw was found in libcurl. This vulnerability allows an attacker to trigger a buffer overflow via an integer overflow in zlib 1.2.0.3 or older when libcurl performs automatic gzip decompression. Mitigation Mitigation for this issue is either not available or the currently available options do n...

YSA-2025-02 | Yubico

A low severity issue has been identified in YubiKeys versions 5.4.1 through 5.7.3 in the FIDO CTAP PIN/UV Auth Protocol Two implementation. These YubiKey versions use the 16 byte signature length from CTAP PIN/UV Auth Protocol One during the verification step, even when the 32 byte CTAP PIN/UV Au...

Directory Traversal

Overview xml2rfc is a Xml2rfc generates RFCs and IETF drafts from document source in XML according to the IETF xml2rfc v2 and v3 vocabularies. Affected versions of this package are vulnerable to Directory Traversal through the src attribute in artwork or sourcecode elements due to improper...