📄 Android 7 / 8 / 8.1 Pointer Disclosure

A flaw in Android's Binder IPC allowed applications to craft Parcels where binder-object metadata overlapped with string data. When unmarshalling, the kernel inserted genuine kernel pointers into attacker-controlled buffers. These could then be echoed back through services like clipboard, resulti...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the sharing of name pointers between components, which could lead to reuse after release...

CVE-2025-40302

In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: forbid removebufs when legacy fileio is active vb2ioctlremovebufs call manipulates queue internal buffer list, potentially overwriting some pointers used by the legacy fileio access mode. Forbid that ioctl when...

Vulnerability of the kalmia_send_init_packet() function in the drivers/net/usb/kalmia.c module – The driver for supporting USB network adapters in Linux kernels allows a hacker to cause a service failure.

Vulnerability of the kalmiasendinitpacket function in the drivers/net/usb/kalmia.c module – The Linux USB device driver framework is vulnerable due to the lack of protection against uninitialized pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2025-40302

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: videobuf2: forbid removebufs when legacy fileio is active vb2ioctlremovebufs call manipulates queue internal buffer list, potentially overwriting some...

CVE-2025-40216

No description is available for this CVE...

drm/amdgpu: install stub fence into potential unused fence pointers

...

UBUNTU-CVE-2025-40216

In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of ...

CVE-2025-40216 io_uring/rsrc: don't rely on user vaddr alignment

In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of ...

xorg: xmayland: Use-after-free in XPresentNotify structure creation

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...

Vulnerability of the panthor_vm_map_pages() function in the drivers/gpu/drm/panthor/panthor_mmu.c module – This function is part of the Linux kernel’s Direct Rendering Infrastructure (DRI) driver support. An attacker can exploit this vulnerability to cause a service failure.

Vulnerability of the panthorvmmappages function in the drivers/gpu/drm/panthor/panthormmu.c module – The Linux DRI driver for kernel direct rendering infrastructure is vulnerable due to the lack of protection against uninitialized pointers. Exploiting this vulnerability could allow an attacker to...

xorg: xmayland: Use-after-free in XPresentNotify structure creation

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...

PT-2025-52889

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7 Description The Linux kernel contains a flaw in the VXLAN implementation where a NULL pointer dereference can occur in the vxlan xmit one function. This happens because the sock4 and sock6 pointers are not...

xorg: xmayland: Use-after-free in XPresentNotify structure creation

A flaw was found in the X.Org X server and Xwayland when processing X11 Present extension notifications. Improper error handling during notification creation can leave dangling pointers that lead to a use-after-free condition. This can cause memory corruption or a crash, potentially allowing an...

openSUSE 16 Security Update : poppler (openSUSE-SU-2025-20068-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025-20068-1 advisory. - CVE-2025-52885: Fixed raw pointers leading to dangling pointers when the vector is resized bsc1251940 Tenable has extracted the preceding description...

CVE-2025-62609

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault in mlx::core::loadgguf when loading malicious GGUF files. Untrusted pointer from external gguflib library is dereferenced without validation, causing application crash. This iss...

Security update for poppler (important)

openSUSE security update: security update for poppler ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20068-1 Rating: important References: bsc1251940 Cross-References: CVE-2025-52885 CVSS scores: CVE-2025-52885 SUSE : 7.3...

SUSE-SU-2025:21132-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2025-52885: Fixed raw pointers leading to dangling pointers when the vector is resized bsc1251940...

OPENSUSE-SU-2025:20068-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2025-52885: Fixed raw pointers leading to dangling pointers when the vector is resized bsc1251940...

PT-2025-49090

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash could occur in the scx enable function when a helper kthread creation failed. This was observed during termination of the sched ext selftests runner with Ctrl+ while test 15 was...