Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed the type of the second parameter in the odneditdpmtable callback. With Clang’s kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013635)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013635 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix type of second parameter in odneditdpmtable callback With clang's kernel control...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011170)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011170 advisory. In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevent array underflow in vega20odneditdpmtable In the PPODEDITVDDCCURVE case the...

CVE-2022-50844

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix type of second parameter in odneditdpmtable callback With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to make sur...

CVE-2022-50844

CVE-2022-50844 relates to a Linux kernel AMDGPU issue where the second parameter type in odn_edit_dpm_table() callback was incompatible, triggering kCFI-related run-time errors. The fix updates the prototype to use enum PP_OD_DPM_TABLE_COMMAND to align with related functions, removing the mismatc...

CVE-2022-50844 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix type of second parameter in odneditdpmtable callback With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to make sur...

CVE-2022-50844 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix type of second parameter in odneditdpmtable callback With clang's kernel control flow integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer prototype to make sur...

CVE-2022-50781

CVE-2022-50781 (Linux kernel, amdgpu driver) : The issue occurs in amdgpu/pm within the Vega 20 DPM table handling (PP_OD_EDIT_VDDC_CURVE). The root cause is that input_index is capped at 2 but not checked for negative values, leading to an out-of-bounds read when the value is supplied by user sp...

CVE-2022-50781 amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()

In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevent array underflow in vega20odneditdpmtable In the PPODEDITVDDCCURVE case the "inputindex" variable is capped at 2 but not checked for negative values so it results in an out of bounds read. This value comes from...

CVE-2022-50781 amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()

In the Linux kernel, the following vulnerability has been resolved: amdgpu/pm: prevent array underflow in vega20odneditdpmtable In the PPODEDITVDDCCURVE case the "inputindex" variable is capped at 2 but not checked for negative values so it results in an out of bounds read. This value comes from...

The vulnerability of the SAP FICA ODN framework, related to improper code generation management, allows attackers to compromise the integrity and accessibility of data.

The vulnerability of the SAP FICA ODN framework is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of data...

CVE-2025-42947

SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on...

CVE-2025-42947 Code Injection vulnerability in SAP FICA ODN framework

SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on...

CVE-2025-42947 Code Injection vulnerability in SAP FICA ODN framework

SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on...

CVE-2025-42947: Improper Control of Generation of Code

SAP FICA ODN framework allows a high privileged user to inject value inside the local variable which can then be executed by the application. An attacker could thereby control the behaviour of the application causing high impact on integrity, low impact on availability and no impact on...

PT-2025-30518 · Sap · Sap Fica Odn Framework

Name of the Vulnerable Software and Affected Versions: SAP FICA ODN framework affected versions not specified Description: The SAP FICA ODN framework allows a user with elevated privileges to inject values into a local variable, which the application can then execute. This could allow an attacker...

Malicious code in odn-static-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a49d8b382070675781a5628be927a75dfaa48ed927b0dbb4d39f49cde36bbc6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in odn-static-assets

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-8461 Malicious code in odn-static-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a49d8b382070675781a5628be927a75dfaa48ed927b0dbb4d39f49cde36bbc6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-34246

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to an array underflow in the vega20 odn edit dpm table function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...