ROS-20250602-01

A vulnerability in the Bluetooth component of the Linux kernel is related to a memory leak in the function hcigetrandomaddress in net/bluetooth/hcisync.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the traceeventshist component of the...

CVE-2019-2334

Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650...

CVE-2025-37938 tracing: Verify event formats that have "%*p.."

In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%p.." The trace event verifier checks the formats of trace events to make sure that they do not point at memory that is not in the trace event itself or in data that will never be freed. I...

CVE-2022-49832

In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix null pointer dereferencing in pinctrldttomap Here is the BUG report by KASAN about null pointer dereference: BUG: KASAN: null-ptr-deref in strcmp+0x2e/0x50 Read of size 1 at addr 0000000000000000 by task...

Advisory ROSA-SA-2025-2857

Software: openssl 1.1.1k OS: ROSA Virtualization 2.1 packageevrstring: openssl-1.1.1.1k-14.0.1.rv3 CVE-ID: CVE-2020-1971 BDU-ID: 2021-00872 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the GENERALNAMEcmp function of the OpenSSL library is related to pointer dereferencing errors. Exploitation of...

Advisory ROSA-SA-2025-2854

Software: binutils 2.30 OS: ROSA Virtualization 3.0 packageevrstring: binutils-2.30-125.0.1.rv30 CVE-ID: CVE-2018-1000876 BDU-ID: 2023-01657 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the disassembledata function of the objdump.c component of the GNU Binutils development software tool is...

ROS-20250430-04

A vulnerability in the libsoup library of the GNOME GUI is related to an infinite loop when reading WebSocket data. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service GNOME GUI libsoup library vulnerability is related to NULL pointer dereferenci...

ROS-20250430-03

A vulnerability in the GPAC multimedia platform is related to a heap buffer overflow in the isomedia/sampledescs.c:1799, in gfisomnewmphadescription in gpac/MP4Box. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the GPAC multimedia platfo...

ROS-20250424-04

The GPAC multimedia platform vulnerability involves uncontrolled resource consumption. Exploitation The vulnerability could allow an attacker to cause a denial of service A vulnerability in a function in gfm2tsprocesspmt of the GPAC multimedia platform is related to buffer copying without checkin...

ROS-20250424-06

A vulnerability in the listitemverbose function of the Libarchive library is related to a bounds error in the processing of .tar .tar files in the listitemverbose function in tar/util.c. Exploitation of the vulnerability could allow an attacker to execute arbitrary code on the target system A...

ROS-20250424-07

Vulnerability of xmlPatMatch function in pattern.c file of libxml2 library is related to null pointer dereferencing. pointer. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. denial of service A vulnerability in the libxml2 library is related...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an arm64 compatibility alignment fix for null pointer dereferencing...

The vulnerability in the kernel implementation of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors allows a hacker to cause service failures.

The vulnerability of the kernel-based implementations of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause system failures...

The vulnerability in the kernel implementation of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors allows a hacker to cause service failures.

The vulnerability of the kernel-based implementations of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the sound/pci/hda/hda_cs_dsp_ctl.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the sound/pci/hda/hdacsdspctl.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the udp_media.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the udpmedia.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-22015 mm/migrate: fix shmem xarray update during migration

In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or in swap cache, but not at the same time. Namely, once it is in swap cache, folio-mapping should be NULL, and the folio is no longer...

The vulnerability of the `init_overdrivelimits()` function in the Linux kernel’s drivers/gpu/drm/amd/pm/powerplay/hwmgr/processpptables.c file allows a malicious actor to trigger a service failure.

The vulnerability of the initoverdrivelimits function in the drivers/gpu/drm/amd/pm/powerplay/hwmgr/processpptables.c file of the Linux kernel is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to trigger a service failure...

ROS-20250320-01

A vulnerability in the bpf component of the Linux kernel is related to resource management errors in the findequalscalars function in kernel/bpf/verifier.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the htcconnectservice function of...

ROS-20250311-01

A vulnerability in the f2fs component of the Linux operating system kernel is related to an incorrect lock in the function f2fshandlecriticalerror in fs/f2fs/super.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in rtl2830pidfilter function ...