CVE-2024-9341 affecting package podman for versions less than 5.6.1-2

CVE-2024-9341 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2017-7526 affecting package grub2 for versions less than 2.06-25

CVE-2017-7526 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2024-45338 affecting package podman for versions less than 5.6.1-2

CVE-2024-45338 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-56737 affecting package grub2 for versions less than 2.06-25

CVE-2024-56737 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2024-45774 affecting package grub2 for versions less than 2.06-25

CVE-2024-45774 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2024-45782 affecting package grub2 for versions less than 2.06-25

CVE-2024-45782 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2025-1118 affecting package grub2 for versions less than 2.06-25

CVE-2025-1118 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

EUVD-2025-36361

InventoryGui allows item duplication in GUIs which use GuiStorageElement...

CVE-2025-12276

A vulnerability was detected in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation results in information disclosure. The attack can be executed remotely. The exploit is now public and ma...

CVE-2025-40070

In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in ppsregistercdev when register device fail Similar to previous commit 2a934fdb01db "media: v4l2-dev: fix error handling in videoregisterdevice", the release hook should be set before deviceregister. Otherwise,...

CVE-2025-40032

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release The fields dmachantx and dmachanrx of the struct pciepftest can be NULL even after EPF initialization. Then it is prudent to check that they have non-NUL...

UBUNTU-CVE-2025-40040

In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksmmadvise syzkaller discovered the following crash: kernel BUG 44.607039 ------------ cut here ------------ 44.607422 kernel BUG at mm/userfaultfd.c:2067! 44.608148 Oops: invalid opcode: 000...

UBUNTU-CVE-2025-40070

In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in ppsregistercdev when register device fail Similar to previous commit 2a934fdb01db "media: v4l2-dev: fix error handling in videoregisterdevice", the release hook should be set before deviceregister. Otherwise,...

CVE-2025-40070 pps: fix warning in pps_register_cdev when register device fail

In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in ppsregistercdev when register device fail Similar to previous commit 2a934fdb01db "media: v4l2-dev: fix error handling in videoregisterdevice", the release hook should be set before deviceregister. Otherwise,...

CVE-2025-40070 pps: fix warning in pps_register_cdev when register device fail

In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in ppsregistercdev when register device fail Similar to previous commit 2a934fdb01db "media: v4l2-dev: fix error handling in videoregisterdevice", the release hook should be set before deviceregister. Otherwise,...

EUVD-2025-36458

In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in ppsregistercdev when register device fail Similar to previous commit 2a934fdb01db "media: v4l2-dev: fix error handling in videoregisterdevice", the release hook should be set before deviceregister. Otherwise,...

CVE-2025-40070

CVE-2025-40070 is a Linux kernel vulnerability in the PPS subsystem. The issue arises when pps_register_cdev calls device_register() before setting the release callback, which can trigger a warning path during device_release() if device creation fails. The fix (and referenced historical context) ...

CVE-2025-40036 misc: fastrpc: fix possible map leak in fastrpc_put_args

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpcputargs copytouser failure would cause an early return without cleaning up the fdlist, which has been updated by the DSP. This could lead to map leak. Fix this by redirecting to a...

CVE-2025-40032

The CVE-2025-40032 issue affects the Linux kernel PCI subsystem for PCIe endpoint tests (pci_epf_test). The vulnerability arises because the dma_chan_tx and dma_chan_rx fields of struct pci_epf_test can be NULL after EPF initialization. The patch adds NULL checks for these channels in pci_epf_tes...

CVE-2025-12224

A flaw has been found in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This vulnerability affects unknown code of the file admin/contact.php. This manipulation of the argument twitter causes cross site scripting. The attack may be initiated remotely. The exploit h...