UBUNTU-CVE-2025-39991

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11kqmim3load If ab-fw.m3data points to data, then fw pointer remains null. Further, if m3mem is not allocated, then fw is dereferenced to be passed to ath11kerr function. Replace fw-size b...

CVE-2025-39991

CVE-2025-39991 affects the Linux kernel’s wifi/ath11k driver. The root cause is a potential NULL dereference in ath11k_qmi_m3_load() when ab->fw.m3_data points to data and m3_mem is not allocated, causing fw to be dereferenced in ath11k_err. The patch fixes this by replacing fw->size with m...

CVE-2025-39991 wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11kqmim3load If ab-fw.m3data points to data, then fw pointer remains null. Further, if m3mem is not allocated, then fw is dereferenced to be passed to ath11kerr function. Replace fw-size b...

PT-2025-46637

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ASoC amd/sdw utils component where a NULL pointer dereference may occur if devm kasprintf fails during memory allocation. Specifically, a debu...

PT-2025-41837

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS ABAP and ABAP Platform affected versions not specified Description A memory corruption issue exists in SAP NetWeaver AS ABAP and ABAP Platform. An unauthenticated attacker can exploit this by sending a corrupted SAP Logon Tick...

Linux Distros Unpatched Vulnerability : CVE-2023-53681

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bcache: Fix bchbtreenodealloc to make the failure behavior consistent In some specific situations, the return value of bchbtreenodealloc may be NULL. This may...

Linux Distros Unpatched Vulnerability : CVE-2023-53658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: bcm-qspi: return error if neither hifmspi nor mspi is available If neither a hifmspi nor mspi resource is present, the driver will just early exit in probe...

Linux Distros Unpatched Vulnerability : CVE-2022-50535

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Fix potential null-deref in dmresume Why Fixing smatch error: dmresume error: we previously assumed 'aconnector-dclink' could be null How Check...

Linux Distros Unpatched Vulnerability : CVE-2023-53673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcievent: call disconnect callback before deleting conn In hcicsdisconnect, we do hciconndel even if disconnection failed. ISO, L2CAP and SCO...

Linux Distros Unpatched Vulnerability : CVE-2023-53648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ac97: Fix possible NULL dereference in sndac97mixer smatch error: sound/pci/ac97/ac97codec.c:2354 sndac97mixer error: we previously assumed 'rac97' could ...

EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2025-2194)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference flaw was found in the GnuTLS software in gnutlsfigurecommonciphersuite.CVE-2025-6395 A heap-buffer-overflow off-by-one...

RLSA-2025:15874 Moderate: python-cryptography security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python-cryptography security update

An update is available for python-cryptography. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programmin...

SUSE CVE-2022-50535

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null-deref in dmresume Why Fixing smatch error: dmresume error: we previously assumed 'aconnector-dclink' could be null How Check if dclink null at the beginning of the loop, so further checks can b...

SUSE CVE-2023-53681

In the Linux kernel, the following vulnerability has been resolved: bcache: Fix bchbtreenodealloc to make the failure behavior consistent In some specific situations, the return value of bchbtreenodealloc may be NULL. This may lead to a potential NULL pointer dereference in caller function like a...

Linux Distros Unpatched Vulnerability : CVE-2023-53476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iwcxgb4: Fix potential NULL dereference in c4iwfillrescmidentry This condition needs to match the previous if epcp-state == LISTEN exactly to avoid a NULL...

Linux Distros Unpatched Vulnerability : CVE-2023-53498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null dereference The adev-dm.dc pointer can be NULL and...

Linux Distros Unpatched Vulnerability : CVE-2023-53566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: fix null deref on element insertion There is no guarantee that rbpr...

Linux Distros Unpatched Vulnerability : CVE-2023-53495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2main: fix possible OOB write in mvpp2ethtoolgetrxnfc rules is allocated ...

Linux Distros Unpatched Vulnerability : CVE-2023-53457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FS: JFS: Fix null-ptr-deref Read in txBegin Syzkaller reported an issue where txBegin may be called on a superblock in a read-only mounted filesystem which lead...