PT-2025-10843 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally...

PT-2025-12453 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally...

SUSE-SU-2025:0817-1 Security update for u-boot

This update for u-boot fixes the following issues: - CVE-2024-57256: integer overflow in U-Boot's ext4 symlink resolution function bsc1237284. - CVE-2024-57258: multiple integer overflows in U-Boot's memory allocator bsc1237287...

PT-2025-10715 · Libzvbi +5 · Libzvbi +5

Name of the Vulnerable Software and Affected Versions: libzvbi versions 0.2.43 and earlier Description: A critical issue has been found in libzvbi, affecting the vbi capture sim load caption function in the src/io-sim.c file. This issue leads to an integer overflow and can be initiated remotely...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-56670)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56670 advisory. - In the Linux kernel, the following vulnerability has been resolved: usb: gadget: userial: Fix the issue that...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53226)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53226 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix NULL pointer derefernce in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-43098)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43098 advisory. - In the Linux kernel, the following vulnerability has been resolved: i3c: Use i3cdev-desc-info instead of...

Advisory ROSA-SA-2025-2772

Software: python-urllib3 1.25.10 OS: ROSA Virtualization 3.0 packageevrstring: python-urllib3-1.25.10-5.rv30 CVE-ID: CVE-2021-33503 BDU-ID: 2022-00586 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the HTTP client for Python urllib3 is related to uncontrolled resource consumption. Exploitation of t...

Advisory ROSA-SA-2025-2759

Software: squid 3.5.20 OS: rosa-server79 packageevrstring: squid-3.5.20-17.0.5.res7.13 CVE-ID: CVE-2023-46846 BDU-ID: 2023-08063 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Squid proxy server chunked decoder is related to the server interpreting fragmented encoding syntax. Exploitation of...

Advisory ROSA-SA-2025-2760

Software: doxygen 1.8.5 OS: rosa-server79 packageevrstring: doxygen-1.8.5-4.0.1.res7 CVE-ID: CVE-2020-11022 BDU-ID: 2020-05190 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the jQuery library is associated with a failure to take measures to protect the structure of a web page. Exploitation of th...

CVE-2024-56787 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-56787 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-53150 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-53150 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56724 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-56724 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-56574 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-56574 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

Unsafe Dependency Resolution

Overview python-json-logger is a JSON Log Formatter for the Python Logging Package Affected versions of this package are vulnerable to Unsafe Dependency Resolution through the deletion of a critical dependency which could be maliciously claimed by a third party. An attacker can execute arbitrary...

CVE-2025-21840

In the Linux kernel, the following vulnerability has been resolved: thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header The intel-lpmd tool 1, which uses the THERMALGENLATTRCPUCAPABILITY attribute to receive HFI events from kernel space, encounters a segmentation fault...

CVE-2025-21836 io_uring/kbuf: reallocate buf lists on upgrade

In the Linux kernel, the following vulnerability has been resolved: iouring/kbuf: reallocate buf lists on upgrade IORINGREGISTERPBUFRING can reuse an old struct iobufferlist if it was created for legacy selected buffer and has been emptied. It violates the requirement that most of the field shoul...

CVE-2025-21837

Removed by vendor...

CVE-2025-21832 block: don't revert iter for -EIOCBQUEUED

In the Linux kernel, the following vulnerability has been resolved: block: don't revert iter for -EIOCBQUEUED blkdevreaditer has a few odd checks, like gating the position and count adjustment on whether or not the result is bigger-than-or-equal to zero where bigger than makes more sense, and not...

CVE-2024-58083 KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()

In the Linux kernel, the following vulnerability has been resolved: KVM: Explicitly verify target vCPU is online in kvmgetvcpu Explicitly verify the target vCPU is fully online prior to clamping the index in kvmgetvcpu. If the index is "bad", the nospec clamping will generate '0', i.e. KVM will...