CVE-2025-27776

Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery SSRF and file write in "modeldownload.py" line 240 in 3.2.7. The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on t...

CVE-2025-27776: Server-Side Request Forgery (SSRF)

Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery SSRF and file write in modeldownload.py line 240 in 3.2.7. The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the...

Linux kernel Power Management Buffer Overflow DoS

The vulnerability of the rt5033batteryprobe function in the drivers/power/supply/rt5033battery.c file of the Linux kernel’s power management driver module is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a...

Linux kernel adv7511_probe Heap Buffer Overflow DoS

The vulnerability of the adv7511probe function in the drivers/gpu/drm/bridge/adv7511/adv7511drv.c kernel module of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

atomisp-lm3554 driver Information Disclosure

Vulnerability of the lm3554probe function in the drivers/staging/media/atomisp/i2c/atomisp-lm3554.c module – The driver for Intel Atom-based devices in the Linux operating system is vulnerable to a memory leak before the last reference is freed. Exploiting this vulnerability could allow an attack...

PT-2025-22202

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential memory leak has been identified in the Linux kernel, specifically in the wcd937x soc codec probe function. This issue arises when snd soc dapm new controls or snd soc dapm ad...

PT-2025-18400

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential NULL pointer dereference issue has been resolved in the Linux kernel. The issue occurred because the off gpios could be NULL, and a missing check was added in the kb3930 prob...

wifi: rtw89: check return value of ieee80211_probereq_get() for RNR

...

PT-2025-17273

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the function mtk dp wait hpd asserted, which may be called before the mtk dp-drm dev pointer is assigned,...

Linux MAX96712 deserializer max96712_probe() Heap Buffer Overflow DoS

The vulnerability of the max96712probe function in the MAX96712 driver’s deserialization library drivers/staging/media/max96712/max96712.c in Linux operating systems is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56574)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56574 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: ts2020: fix null-ptr-deref in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56568)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56568 advisory. - In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Defer probe of clients...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56574)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56574 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: ts2020: fix null-ptr-deref in...

gpio: grgpio: Add NULL check in grgpio_probe

...

OESA-2025-1245 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr-deref in ufxusbprobe I got a null-ptr-deref report: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP:...

SUSE CVE-2024-58063

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: fix memory leaks and invalid access at probe error path Deinitialize at reverse order when probe fails. When initswvars fails, rtldeinitcore should not be called, specially now that it destroys the rtlwq workqueue...

SUSE CVE-2024-58072

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused checkbuddypriv Commit 2461c7d60f9f "rtlwifi: Update header file" introduced a global list of private data structures. Later on, commit 26634c4b1868 "rtlwifi Modify existing bits to match vendor versio...

DEBIAN-CVE-2024-58072

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused checkbuddypriv Commit 2461c7d60f9f "rtlwifi: Update header file" introduced a global list of private data structures. Later on, commit 26634c4b1868 "rtlwifi Modify existing bits to match vendor versio...

CVE-2024-58063

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: fix memory leaks and invalid access at probe error path Deinitialize at reverse order when probe fails. When initswvars fails, rtldeinitcore should not be called, specially now that it destroys the rtlwq workqueue...

AZL-59136 CVE-2024-58063 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: fix memory leaks and invalid access at probe error path Deinitialize at reverse order when probe fails. When initswvars fails, rtldeinitcore should not be called, specially now that it destroys the rtlwq workqueue...