EUVD-2025-197616

On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153...

PT-2025-46974

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description Certain serial console input on affected platforms running Arista EOS may cause an unexpected reload of the device. Recommendations At the moment, there is no information about a newer...

CVE-2025-40122

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

SUSE CVE-2025-40122

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

EUVD-2025-124961

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

CVE-2025-40122

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

UBUNTU-CVE-2025-40122

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

CVE-2025-40122

CVE-2025-40122 relates to the Linux kernel perf_x86/intel PMU and the IA32_PMC_x_CFG_B MSR access error observed on PTL. The issue arises when configuring ACR (auto counter reload) masks via perf events: an incorrect check in intel_pmu_acr_late_setup() lets an invalid ACR counter mask be written ...

CVE-2025-40122 perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

CVE-2025-40122 perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...

Linux Distros Unpatched Vulnerability : CVE-2025-40122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes...

Security Advisory 0125

Security Advisory 0125 . CSAF PDF Date: November 11, 2025 Revision | Date | Changes ---|---|--- 1.0 | November 11, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-8870 CVSS:3.1 Base Score 4.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H CVSS:4.0 Base Score 5.6...

Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362

Cisco on Wednesday disclosed that it became aware of a new attack variant that's designed to target devices running Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software releases that are susceptible to CVE-2025-20333 and...

Centreon authenticated command injection leading to RCE via broker engine "reload" parameter

Centreon is a platform designed to monitor your cloud and on-premises infrastructure. This module exploits an command injection vulnerability using the broker engine reload setting on the poller configuration page of the Centreon web application. Injecting a malcious payload at the broker engine...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988896)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988896 advisory. In the Linux kernel, the following vulnerability has been resolved: devlink: fix netns refcount leak in devlinknlcmdreload While preparing my patch series adding net...

CVE-2025-58188 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: mockgen, manifest-tool, gptscript, yunikorn-web, grafana-pyroscope, helm-docs, sbom-convert, wait-for-port, xcover, kyverno-policy-reporter-ui, falco-no-driver, cloud-provider-azure, coredns, kyverno, kuberlr, certificate-transparency, helm-push, hey,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: bazelisk, dockerize, mockgen, delve, manifest-tool, vitess, yunikorn-web, scorecard, crossplane, k3d, external-secrets-operator, cluster-api-gcp-controller, policy-controller, terraform-docs, grafana-pyroscope, kubernetes-dashboard-metrics-scraper, helm-docs, ini-fil...