CVE-2022-49180

In the Linux kernel, the following vulnerability has been resolved: LSM: general protection fault in legacyparseparam The usual LSM hook "bail on fail" scheme doesn't work for cases where a security module may return an error code indicating that it does not recognize an input. In this particular...

CVE-2022-49689

The CVE entry for CVE-2022-49689 is complemented by concrete details in connected documents. The Linux kernel’s xen-blkfront component is affected by a NULL pointer dereference when a VBD is not fully created and then closed, potentially triggering a kernel panic. The root cause involves NULL var...

CVE-2022-49647 cgroup: Use separate src/dst nodes when preloading css_sets for migration

In the Linux kernel, the following vulnerability has been resolved: cgroup: Use separate src/dst nodes when preloading csssets for migration Each cset cssset is pinned by its tasks. When we're moving tasks around across csets for a migration, we need to hold the source and destination csets to...

CVE-2022-49520 arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall

In the Linux kernel, the following vulnerability has been resolved: arm64: compat: Do not treat syscall number as ESRELx for a bad syscall If a compat process tries to execute an unknown system call above the ARMNRCOMPATEND number, the kernel sends a SIGILL signal to the offending process...

CVE-2022-49139

CVE-2022-49139 affects the Linux kernel Bluetooth stack. The issue occurs in the HCI handling path: upon receiving a HCI_Synchronous_Connection_Complete for a BDADDR of an existing LE connection, with LE link type and a status triggering the second packet-processing case, a NULL pointer dereferen...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not calling genlunregisterfamily first in the nbdcleanup function, which could lead to a contention between...

PT-2025-8229 · Unknown · Generic Ufr Ii V4 Printer Driver +2

Name of the Vulnerable Software and Affected Versions: Generic PCL6 V4 Printer Driver affected versions not specified Generic UFR II V4 Printer Driver affected versions not specified Generic LIPSLX V4 Printer Driver affected versions not specified Description: The issue is related to an...

PT-2025-8694

Name of the Vulnerable Software and Affected Versions CGI gem versions prior to 0.4.2 Description The CGI::Cookie.parse method in the CGI library contains a potential Denial of Service DoS vulnerability. The method does not impose any limit on the length of the raw cookie value it processes,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a gpumetricstable memory leak...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from zonefs not properly handling iomap types and lengths when processing reads...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from the failure to disassociate NAPI when the tun device is destroyed...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a gpumetricstable memory leak...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a double release in the DC stream during a GPU reset...

PT-2025-14292

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue in the Linux kernel has been resolved. The problem occurred when the fence release processing was not properly handled, leading to potential recursive locking detected...

NULL Pointer Dereference

libxml2 is vulnerable to a NULL Pointer Dereference. The vulnerability is due to improper handling of pattern matching due to a flaw in xmlPatMatch in pattern.c, which can lead to a crash when processing certain XML data...

CVE-2024-57026

TawkTo Widget Version = 1.3.7 is vulnerable to Cross Site Scripting XSS due to processing user input in a way that allows JavaScript execution...

The vulnerability of D-Link DSL-3782 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a service failure.

The vulnerability of D-Link DSL-3782 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory when processing parameters like the netmask and gateway. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

CVE-2024-57026

The CVE-2024-57026 entry concerns the TawkTo Widget, affected versions prior to or equal to 1.3.7, which are vulnerable to Cross Site Scripting (XSS) due to how user input is processed. This is the stated root cause and impact across connected sources (e.g., Red Hat, CVE listings, and PT Security...

PT-2025-8699 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash issue was identified, characterized as an UNKNOWN READ. The crash involves the ndpi strdup function, process ndpi collected info function, and node cleanup walker function...

CVE-2025-1556

A vulnerability, which was classified as problematic, has been found in westboy CicadasCMS 1.0. This issue affects some unknown processing of the file /system of the component Template Management. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has bee...