PT-2025-13314

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue has been resolved in the Linux kernel. The problem occurred because the driver attempted to resume ports that were not yet registered. This issue has bee...

PT-2025-38462

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak was resolved in the arizona clock driver within the Linux kernel. The arizona clk32k enable function incorrectly used pm runtime get sync, which increases the...

PT-2025-41040

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the drm/amd/display module, specifically within the dm resume function. This issue involves a potential null dereference, identified by a smatch error...

GSD-2022-1007774 phy: qcom-qmp-combo: fix NULL-deref on runtime resume

phy: qcom-qmp-combo: fix NULL-deref on runtime resume This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit...

PT-2024-11834

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel's xen-netfront component is related to resource management errors in the netfront resume function. The issue arises when a NAPI is set up for each...

PT-2025-40730

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue was identified and resolved in the dm cache functionality of the Linux kernel. This problem occurs when dm resume and dm destroy are executed concurrently. The...

PT-2025-53961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue was identified and resolved in the Linux kernel related to dm clone functionality within the clone dtr function. The issue also exists when dm resume and dm...

PT-2025-43073

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free condition within the dm thin subsystem, specifically in the run timer softirq function. This issue arises when dm resume and dm destroy...

PT-2025-54125

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the dm integrity module of the Linux kernel. This problem occurs when dm resume and dm destroy functions are executed concurrently. The issue is...

Moodle 跨站请求伪造漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site request forgery vulnerability exists in Moodle versions 3.9.0 and later, 3.9.18 and earlier, 3.11.0 and later, 3.11.11 and...

libvirt security, bug fix, and enhancement update

8.5.0-7.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 8.5.0-7 - securityselinux: Dont ignore NVMe disks when setting image label rhbz2121441 8.5.0-6 - qemuprocess: Destroy domains namespace after killing QEMU rhbz2121141 8.5.0-5 - rpc: Pass OPENSSLCONF through to ssh invocations...

kernel: dm raid: fix address sanitizer warning in raid_resume

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raidresume There is a KASAN warning in raidresume when running the lvm test lvconvert-raid.sh. The reason for the warning is that mddev-raiddisks is greater than rs-raiddisks, so the loop...

PT-2022-35104 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the eth: alx component, where a lock is not properly taken on resume, potentially leading to security vulnerabilities. The actual impact and attack plausibility have n...

PT-2022-35087

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.3 Description The issue is related to the ASoC: wcd-mbhc-v2 component in the Linux Kernel. It involves the reverting of a change that used pm runtime resume and get. The actual impact and attack plausibility...

kernel: dm raid: fix address sanitizer warning in raid_resume

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raidresume There is a KASAN warning in raidresume when running the lvm test lvconvert-raid.sh. The reason for the warning is that mddev-raiddisks is greater than rs-raiddisks, so the loop...

PT-2025-26011 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to a KASAN warning in the raid resume function. The warning occurs when mddev-raid disks is greater than rs-raid disks,...

PT-2025-40128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/Rockchip LVDS subsystem related to power management usage counters. The pm runtime get sync function increments the power management usage counter...

Complex Impersonation Story

This is a story of one piece of what is probably a complex employment scam. Basically, real programmers are having their resumes copied and co-opted by scammers, who apply for jobs or, I suppose, get recruited from various job sites, then hire other people with Western looks and language skills a...

expat: a use-after-free in the doContent function in xmlparse.c

A vulnerability was found in expat. With this flaw, it is possible to create a situation in which parsing is suspended while substituting in an internal entity so that XMLResumeParser directly uses the internalEntityProcessor as its processor. If the subsequent parse includes some unclosed tags,...

Wordfence 7.7.0 Is Out! Here Are The Changes

Wordfence 7.7.0 has just been released and as usual, it includes several awesome enhancements and updates for our security conscious WordPress publishers and e-commerce websites. This post goes into a little more detail on each change weve included. We dont usually post additional detail like thi...