Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from usb-audio not validating the length of the UAC3 power domain descriptor, which could lead to out-of-bounds...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from AMD PM not checking for null pointers...

thermal: intel: hfi: Add syscore callbacks for system-wide PM

...

spi: lpspi: Avoid potential use-after-free in probe()

...

drm/amdgpu/pm: fix the null pointer while the smu is disabled

...

CVE-2025-9696

The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...

CVE-2025-9696 Use of Hard-coded Credentials in SunPower PVS6

The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...

CVE-2025-9696

CVE-2025-9696 concerns SunPower PVS6 BluetoothLE security. The vulnerability arises from the device’s Bluetooth Low Energy interface using hardcoded encryption parameters and publicly accessible protocol details, enabling an attacker in Bluetooth range to gain full access to the servicing interfa...

CVE-2025-9696 Use of Hard-coded Credentials in SunPower PVS6

The SunPower PVS6's BluetoothLE interface is vulnerable due to its use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range could exploit this vulnerability to gain full access to the device's servicing interface. This access allows the...

PT-2025-35584

Name of the Vulnerable Software and Affected Versions: SunPower PVS6 affected versions not specified Description: The SunPower PVS6’s BluetoothLE interface is vulnerable due to the use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range...

uTools 安全漏洞

uTools is a customization tool platform from China Ape Power uTools Inc. A security vulnerability exists in uTools 7.1.1 and earlier versions, which stems from improper handling of the PDF Preview feature and could lead to a cross-site scripting attack...

Linux Distros Unpatched Vulnerability : CVE-2025-38631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: imx95-blk-ctl: Fix synchronous abort When enabling runtime PM for clock suppliers that...

The vulnerability of the software for energy monitoring, EcoStruxure Power Monitoring Expert and Power Operation, arises from incorrect restrictions on the path to the restricted-access catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the incorrect restriction on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the software for energy monitoring solutions like EcoStruxure Power Monitoring Expert and Power Operation lies in the ability to disclose information in unauthorized areas of the data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the ability to disclose information in the erroneous data range. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the software for energy monitoring, EcoStruxure Power Monitoring Expert and Power Operation, arises from incorrect restrictions on the path to the restricted-access catalog. This allows a perpetrator to execute arbitrary code.

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the incorrect restriction of the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Linux Distros Unpatched Vulnerability : CVE-2025-38610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powercap: dtpmcpu: Fix NULL pointer dereference in getpdpoweruw The getpdpoweruw function ca...

Linux Distros Unpatched Vulnerability : CVE-2025-38521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix kernel crash when hard resetting the GPU The GPU hard reset sequence...

RHEL 8 : fence-agents (RHSA-2025:14750)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:14750 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

Linux Distros Unpatched Vulnerability : CVE-2025-38557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to prevent NULL pointer dereference A...

Linux Distros Unpatched Vulnerability : CVE-2021-28707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...