7018 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an ACPI/pfrupdate module driver update version checking error...
AMD多款产品 安全漏洞
AMD Embedded Processors and others are products of Ultra Micro Semiconductor AMD.AMD Embedded Processors are a series of embedded high-performance GPUs.AMD Client Processor is a processor for client devices such as PCs, laptops, etc.AMD Server Processor is a processor product for the server marke...
AZL-66893 CVE-2025-38704 affecting package kernel 6.6.126.1-1
In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer access In the preparation stage of CPU online, if the corresponding the rdp's-nocbcbkthread does not exist, will be created, there is a situation where the rdp's rcuop...
CVE-2025-38696
In the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stacktop for tasks without ABI or vDSO Not all tasks have an ABI associated or vDSO mapped, for example kthreads never do. If such a task ever ends up calling stacktop, it will derefence the NULL ABI pointer...
UBUNTU-CVE-2025-38705
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix null pointer access Writing a string without delimiters ' ', '\n', '\0' to the under gpuod/fanctrl sysfs or pppowerprofilemode for the CUSTOM profile will result in a null pointer dereference...
x86/sev: Evict cache lines during SNP memory validation
...
cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
...
x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
...
mm: zswap: properly synchronize freeing resources during CPU hotunplug
...
In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.
...
crypto: iaa - Fix nr_cpus < nr_iaa case
...
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250812 release bsc1248438 CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable...
Linux Distros Unpatched Vulnerability : CVE-2025-38675
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xfrm: state: initialize stateptrs earlier in xfrmstatefind In case of preemption,...
SAMSUNG Mobile Processor 安全漏洞
SAMSUNG Mobile Processor is a family of mobile processors from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile Processor that originates from a buffer copy programming error that results in an out-of-bounds write...
AVX-Based Timing Side Channel — ASLR Detection
This work demonstrates a technique for detecting ASLR using AVX memory load instructions combined with RDTSCP timing and SIGSEGV detection. It illustrates how side-channel timing measurements can be applied to analyze memory layout randomization...
Linux Distros Unpatched Vulnerability : CVE-2025-38581
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp - Fix crash when rebind ccp device for ccp.ko When CONFIGCRYPTODEVCCPDEBUGFS is enabled, rebinding the ccp device causes the following crash: $ echo...
CVE-2025-6203
A denial of service flaw has been discovered in Hashicorp's vault secret storage project. A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit, which results in excessive memory and CPU consumption of Vault. This may lead to a timeout...
GHSA-8F82-53H8-2P34 HashiCorp Vault Community Edition Denial of Service Though Complex JSON Payloads
A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault’s auditing subroutine, potentially resulting in the Vault server to become...
Spim 安全漏洞
Spim is a MIPS architecture processor simulator by the individual developer James Larus. A security vulnerability exists in Spim 9.1.24 and earlier versions, which stems from a buffer overflow in the READSYSCALL and WRITESYSCALL system calls...
Linux Distros Unpatched Vulnerability : CVE-2021-33829
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executab...