O-RAN Near-Realtime RIC 安全漏洞

The O-RAN Near-Realtime RIC is an inbound component of the O-RAN organization. A security vulnerability exists in the O-RAN Near-Realtime RIC that stems from the Subscription Manager API component being susceptible to a specially crafted request attack that could result in a denial of service...

AlmaLinux 8 : kernel-rt (ALSA-2025:16373)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:16373 advisory. kernel: vsock: Fix transport TOCTOU CVE-2025-38461 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that...

CVE-2025-10501

Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

SUSE-SU-2025:03343-1 Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506001017 fixes several issues. The following security issues were fixed: - CVE-2025-38177: schhfsc: make hfscqlennotify idempotent bsc1246356. - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow bsc1245685. - CVE-2025-38181: calipso: Fix...

RHSA-2025:16373 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

SUSE-SU-2025:20793-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_12

This update for kernel-livepatch-MICRO-6-0-RTUpdate12 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel rt update 12...

Ubuntu: Security Advisory (USN-7758-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2025-39745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rcutorture: Fix rcutortureoneextendcheck splat in RT kernels For built with CONFIGPREEMPTRT=y kernels, running rcutorture tests resulted in the following splat:...

CVE-2025-39745

In the Linux kernel, the following vulnerability has been resolved: rcutorture: Fix rcutortureoneextendcheck splat in RT kernels For built with CONFIGPREEMPTRT=y kernels, running rcutorture tests resulted in the following splat: 68.797425 rcutortureoneextendcheck during change: Current 0x1 To add...

RHEL 9 : kernel-rt (RHSA-2025:15224)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15224 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT

...

Ubuntu: Security Advisory (USN-7725-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHSA-2025:14746 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

USN-7722-1 linux, linux-aws, linux-aws-6.14, linux-gcp, linux-hwe-6.14, linux-raspi, linux-realtime, linux-realtime-6.14 vulnerability

A security issues was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Network traffic control; CVE-2025-38350...

Ubuntu Pro 24.04 LTS Realtime Kernel : Linux kernel (Raspberry Pi Real-time) vulnerabilities (USN-7719-1)

The remote Ubuntu Pro 24.04 LTS Realtime Kernel host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7719-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This upda...

Linux Distros Unpatched Vulnerability : CVE-2022-39244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. In versions of PJSIP prior to 2.13 the PJSIP parser, PJMEDIA RTP decoder, and...

SUSE-SU-2025:02873-1 Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP7)

This update for the Linux Kernel 6.4.0-15070073 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hidhwrawrequest bsc1247350. - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID bsc1247351. -...

Malicious code in openai-realtime-console-plugin (npm)

The package openai-realtime-console-plugin was found to contain malicious code...

MAL-2025-28317 Malicious code in openai-realtime-console-plugin (npm)

The package openai-realtime-console-plugin was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2017-14340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The XFSISREALTIMEINODE macro in fs/xfs/xfslinux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local...