726 matches found
EUVD-2022-27234
Malicious code in bioql PyPI...
EUVD-2025-18575
Malicious code in bioql PyPI...
EUVD-2024-19430
Malicious code in bioql PyPI...
EUVD-2023-37299
Malicious code in bioql PyPI...
EUVD-2023-12345
Malicious code in bioql PyPI...
EUVD-2023-38431
Malicious code in bioql PyPI...
SUSE CVE-2025-39892
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: care NULL dirver name on sndsoclookupcomponentnolocked soc-generic-dmaengine-pcm.c uses same dev for both CPU and Platform. In such case, CPU component driver might not have driver-name, then...
Amazon Linux 2 : mpg123, --advisory ALAS2-2025-2997 (ALAS-2025-2997)
The version of mpg123 installed on the remote host is prior to 1.32.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2997 advisory. An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the...
Medium: mpg123
Issue Overview: An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to...
PT-2025-46617
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the ALSA PCM subsystem related to interrupt handling on PREEMPT RT systems. Specifically, snd pcm group lock irq acquires a spinlock, disabling...
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
...
DEBIAN-CVE-2025-38706
In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in sndsocremovepcmruntime sndsocremovepcmruntime might be called with rtd == NULL which will leads to null pointer dereference. This was reproduced with topology loading and marking a link as...
AZL-75161 CVE-2025-38706 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in sndsocremovepcmruntime sndsocremovepcmruntime might be called with rtd == NULL which will leads to null pointer dereference. This was reproduced with topology loading and marking a link as...
Linux Distros Unpatched Vulnerability : CVE-2024-10573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer...
USN-7704-5 linux-gke, linux-kvm vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...
The vulnerability of the `snd_pcm_attach_substream()` function in the sound/core/pcm.c module, which is part of the Linux operating system’s audio card support mechanism, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sndpcmattachsubstream function in the sound/core/pcm.c module, which is part of the Linux kernel’s audio card support mechanism, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
The vulnerability of the `snd_pcm_lib_preallocate_proc_write()` function in the `sound/core/pcm_memory.c` module, which is part of Linux’s kernel-based audio card support mechanism, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sndpcmlibpreallocateprocwrite function in the sound/core/pcmmemory.c module, which is part of Linux’s audio card support, relates to the reallocation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
USN-7704-3: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...
USN-7704-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...
Linux Distros Unpatched Vulnerability : CVE-2023-0266
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRVCTLIOCTLELEMREAD|WRITE32 is missing locks that can be used in a...