12298 matches found
CVE-2026-22281
Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.10.1.3, versions starting from 9.11.0.0 and prior to 9.13.0.0, contains a Time-of-check Time-of-use TOCTOU race condition vulnerability. A low privileged attacker with adjacent...
CVE-2026-22281
Dell PowerScale OneFS is affected by a TOCTOU race condition vulnerability (CVE-2026-22281) that can lead to denial of service. Affected versions are 9.5.0.0–9.5.1.5, 9.6.0.0–9.7.1.10, 9.8.0.0–9.10.1.3, and 9.11.0.0–9.12.x (prior to 9.13.0.0). The condition arises from synchronization errors when...
CVE-2026-22280
Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.10.1.3, versions starting from 9.11.0.0 and prior to 9.13.0.0, contains an incorrect permission assignment for critical resource vulnerability. A low privileged attacker with loc...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37979)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37979 advisory. - In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential...
Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27004)
The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27004 advisory. - In the Linux kernel, the following vulnerability has been resolved: clk: Get runtime PM before walki...
Azure Linux 3.0 Security Update: kernel (CVE-2024-46846)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46846 advisory. - In the Linux kernel, the following vulnerability has been resolved: spi: rockchip: Resolve unbalanced runtim...
Azure Linux 3.0 Security Update: kernel (CVE-2024-36478)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36478 advisory. - In the Linux kernel, the following vulnerability has been resolved: nullblk: fix null-ptr-dereference while...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37840)
"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37840 advisory. - In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume...
Azure Linux 3.0 Security Update: kernel (CVE-2024-49961)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49961 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: i2c: ar0521: Use cansleep version...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38365)
"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38365 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a race between renames and...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38136)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38136 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: renesasusbhs: Reorder clock handlin...
Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-26963)
The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26963 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-am62: fix module...
Azure Linux 3.0 Security Update: kernel (CVE-2024-46680)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46680 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash...
Azure Linux 3.0 Security Update: kernel (CVE-2024-42238)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42238 advisory. - In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Return error if block...
EUVD-2025-206323
EVerest is an EV charging software stack. Prior to version 2025.12.0, ismessagecrccorrect in the DZGGSH01 powermeter SLIP parser reads vecvec.size-1 and vecvec.size-2 without checking that at least two bytes are present. Malformed SLIP frames on the serial link can reach ismessagecrccorrect with...
Everest-Core buffer error vulnerability
Everest-core is a major component of the EVerest open-source electric vehicle charging software stack. Versions of everest-core prior to 2025.12.0 contained a buffer error vulnerability. This vulnerability stems from the ismessagecrccorrect function in the DZGGSH01 power meter SLIP parser, which...
DCeption: Real-World Wireless Man-In-The-Middle Attacks against CCS EV Charging
The adoption of Electric Vehicles EVs is happening at a rapid pace. To ensure fast and safe charging, complex communication is required between the vehicle and the charging station. In the globally used Combined Charging System CCS, this communication is carried over the HomePlug Green PHY HPGP...
Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.164 fixes various security issues The following security issues were fixed: CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 bsc1249242. CVE-2022-50327: ACPI: processor: idle: Che...
SUSE CVE-2025-71106
In the Linux kernel, the following vulnerability has been resolved: fs: PM: Fix reverse check in filesystemsfreezecallback The freezeallptr check in filesystemsfreezecallback introduced by commit a3f8f8662771 "power: always freeze efivarfs" is reverse which quite confusingly causes all file syste...
