GO-2025-3503 HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

CVE-2025-21845

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: sst: Fix SST write failure 'commit 18bcb4aa54ea "mtd: spi-nor: sst: Factor out common write operation to sstnorwritedata"' introduced a bug where only one byte of data is written, regardless of the number of bytes...

CVE-2024-58089

CVE-2024-58089 affects the Linux kernel: a double accounting race in btrfs_run_delalloc_range() can occur when 4K block size is smaller than 64K page size (aarch64), potentially leading to kernel panics and oops during delalloc handling (as seen in the provided trace: can_finish_ordered_extent, b...

CVE-2025-2208

A vulnerability, which was classified as problematic, has been found in aitangbao springboot-manager 3.0. This issue affects some unknown processing of the file /sysFiles/upload of the component Filename Handler. The manipulation of the argument name leads to cross site scripting. The attack may ...

CVE-2025-2149 PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnqSigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zeropoint leads to improper initialization. The attack needs to be approached...

CWAL 2411 | "Ctrl+Shift+T", brings up citrix toolbar instead of reopening closed tab

Since we updated our Workspace on Linux Machines from 24.5.0.76 to 24.11.0.85, users are experiencing the following issue: Pressing Ctrl + Shift + T, brings up citrix toolbar on the endpoint instead of reopening closed tab on the windows machine...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53173)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53173 advisory. - In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in...

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6

CVE-2025-22868 affecting package node-problem-detector for versions less than 0.8.17-6. A patched version of the package is available...

CVE-2025-21831

CVE-2025-21831 covers a Linux kernel PCI issue: on some TUXEDO Sirius Gen1 systems, a BIOS-specific wakeup failure caused suspend-time root-port D3hot entry. Root cause is a policy change from commit 9d26d3a8f1b0 that allowed all PCIe ports to enter D3, which could hang on resume for the affected...

CVE-2024-58060

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject structops registration that uses module ptr and the module btfid is missing There is a UAF report in the bpfstructops when CONFIGMODULES=n. In particular, the report is on tcpcongestionops that has a "struct module...

Linux Distros Unpatched Vulnerability : CVE-2024-49993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix potential lockup if qisubmitsync called with 0 count If qisubmitsync is...

Linux Distros Unpatched Vulnerability : CVE-2024-53049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: slub/kunit: fix a WARNING due to unwrapped kmalloccachenoprof 'modprobe slubkunit' will have...

Linux Distros Unpatched Vulnerability : CVE-2024-57884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: vmscan: account for free pages to prevent infinite Loop in throttledirectreclaim The task sometimes continues looping in throttledirectreclaim because...

Linux Distros Unpatched Vulnerability : CVE-2024-9676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-...

Linux Distros Unpatched Vulnerability : CVE-2024-57977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - memcg: fix soft lockup in the OOM process A soft lockup issue was found in the product with about 56,000 tasks were in the OOM cgroup, it was traversing them wh...

Linux Distros Unpatched Vulnerability : CVE-2024-55553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer...

Linux Distros Unpatched Vulnerability : CVE-2024-56584

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/tctx: work around xastore allocation error issue syzbot triggered the following WARNON: WARNING: CPU: 0 PID: 16 at iouring/tctx.c:51...

Linux Distros Unpatched Vulnerability : CVE-2024-54505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia...

Linux Distros Unpatched Vulnerability : CVE-2024-57889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking If a device uses MCP23xxx IO expander to receive IRQs, the following bug can happen: BUG...

Linux Distros Unpatched Vulnerability : CVE-2025-21678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gtp: Destroy device along with udp socket's netns dismantle. gtpnewlink links the device to a list in devnetdev instead of srcnet, where a udp tunnel socket is...