CVE-2025-71408

A flaw was found in NLTK Natural Language Toolkit. This eval injection vulnerability in the nltk.collocations module allows a local attacker to execute arbitrary Python code. By manipulating command-line arguments when collocations.py is invoked directly, an attacker can bypass validation and...

kernel: smc: Fix use-after-free in __pnet_find_base_ndev()

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

kernel: crypto: qat - validate RSA CRT component lengths

A flaw was found in the Linux kernel's QAT QuickAssist Technology crypto module. This vulnerability occurs in the RSA key parser when handling CRT Chinese Remainder Theorem components. An underflow can happen during a memory copy operation if an RSA CRT component is larger than its allocated...

CLEANSTART-2026-RD72054 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the grype-fips package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

kernel security update

6.12.0-211.51.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Linux kernel cgroup_migrate_add_task Heap Buffer Overflow DoS

The vulnerability of the cgroupmigrateaddtask function in the kernel/cgroup/cgroup.c module of the Linux operating system is related to incorrect handling of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel cgroup Heap Buffer Overflow DoS

The vulnerability of the pressurewrite function in the Linux kernel/cgroup/cgroup.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux ICMPv6 Buffer Overflow DoS

The vulnerability of the icmpv6rcv function in the net/ipv6/icmp.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel firmware DoS

The vulnerability in the eficapsulesetupinfo function within the drivers/firmware/efi/capsule-loader.c file of the Linux kernel firmware driver is related to an incorrect buffer size calculation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

bpf DoS

The vulnerability of the btfcheckdtorkfuncs function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, is related to improper security checks for standard elements. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux Kernel Futex Heap Buffer Overflow DoS

The vulnerability of the futexrequeue function in the kernel/futex/requeue.c module of the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel IVPU IPC Buffer Overflow DoS

The vulnerability in the ivpuipcreceive function within the drivers/accel/ivpu/ivpuipc.c file of the Linux kernel system is related to integer overflow or cyclic shift. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...

netfilter Heap Buffer Overflow DoS

The vulnerability in the nftexthdrinit function within net/netfilter/nftexthdr.c of the Linux kernel’s netfilter component involves access to an uninitialized pointer. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...

Linux Kernel DoS

The vulnerability in the skbgroreceivelist function within net/core/gro.c, which supports network functions of the Linux kernel, is related to buffer overflows in memory. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Linux Kernel DoS

The vulnerability in the netlblunlabeladdrinfoget function within the net/netlabel/netlabelunlabeled.c module, which implements network functions of the Linux kernel, is related to buffer overflow conditions. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux Kernel DoS

The vulnerability in the mrppduparsevecattr function within the net/802/mrp.c file of the Linux kernel’s network functions implementation is related to improper validation of a specified index, position, or offset within input data. Exploitation of this vulnerability may allow an attacker to caus...

nl80211 Calculate Ap Params DoS

The vulnerability of the nl80211calculateapparams function in the net/wireless/nl80211.c module, which supports wireless communication in Linux kernel, is related to error handling flaws. Exploiting this vulnerability can allow attackers to cause system failures...

Linux Kernel DoS

The vulnerability in the devlinkfree function within net/devlink/core.c, which implements network functions of the Linux kernel, is related to a resource leak that occurs after the proper expiration of its usage period. Exploitation of this vulnerability may allow an attacker to cause a denial of...

Linux Kernel DoS

The vulnerability in the lowpaniphcmcastctxaddrcompress function within the net/6lowpan/iphc.c file of the Linux kernel network functions implementation is related to a single-bit offset error. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ccpaescomplete function in the drivers/crypto/ccp/ccp-crypto-aes.c module of the Linux kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...