kernel: mm: zswap: properly synchronize freeing resources during CPU hotunplug

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswapcompress and zswapdecompress, the per-CPU acompctx of the current CPU at the beginning of the operation is retrieved and used throughout. However, sin...

netfs: Fix missing xas_retry() calls in xarray iteration

...

[SECURITY] Fedora 41 Update: rust-backon-1.6.0-1.fc41

Make retry like a built-in feature provided by Rust...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: netfs: Fixed an oops in write-retry due to mis-resetting of the subreq iterator. Fixed the resetting of the subrequest iterator in netfsretrywritestream, by using the iterator-reset function, as the iterator might have been...

SUSE SLES12 Security Update : chrony (SUSE-SU-2025:3868-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:3868-1 advisory. Security issues fixed: - Race condition during socket creation by chronyc allows privilege escalation from user chrony to root bsc1246544. Other issues...

Security update for chrony

This update for chrony fixes the following issues: Security issues fixed: - Race condition during socket creation by chronyc allows privilege escalation from user chrony to root bsc1246544. Other issues fixed: - Improve connection retry intervals when facing NTS-KE related issues bsc1213551. nts:...

SUSE-SU-2025:3868-1 Security update for chrony

This update for chrony fixes the following issues: Security issues fixed: - Race condition during socket creation by chronyc allows privilege escalation from user chrony to root bsc1246544. Other issues fixed: - Improve connection retry intervals when facing NTS-KE related issues bsc1213551. nts:...

CVE-2025-62399 Moodle: password brute force risk when mobile/web services enabled

Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks...

EUVD-2022-55650

In the Linux kernel, the following vulnerability has been resolved: class: fix possible memory leak in classregister If classaddgroups returns error, the 'cp-subsys' need be unregister, and the 'cp' need be freed. We can not call ksetunregister here, because the 'cls' will be freed in callback...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2025-39782: jbd2: prevent softlockup in jbd2logdocheckpoint bsc1249526. CVE-2025-39773: net: bridge: fix soft lockup in...

CVE-2025-53967

Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable endpoint fails to properly sanitize...

SUSE CVE-2022-50504

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtasosterm It's unsafe to use rtasbusydelay to handle a busy status from the ibm,os-term RTAS function in rtasosterm: Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b BUG:...

EUVD-2020-0289

Malware in sbrugna...

EUVD-2017-9404

Malware in sbrugna...

EUVD-2021-15601

Malware in sbrugna...

SUSE CVE-2022-50490

In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htablockbucket to userspace In htabmaplookupanddeletebatch if htablockbucket returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but...

CVE-2022-50504

CVE-2022-50504 (Linux kernel, powerpc/rtas) : Root cause is unsafe handling of a busy status from the ibm,os-term RTAS function via rtas_busy_delay(), which can cause a kernel panic and invalid-context sleep. The fix (as stated in the description) is to stop using rtas_busy_delay() and instead ca...

CVE-2022-50504 powerpc/rtas: avoid scheduling in rtas_os_term()

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtasosterm It's unsafe to use rtasbusydelay to handle a busy status from the ibm,os-term RTAS function in rtasosterm: Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b BUG:...

CVE-2022-50504 powerpc/rtas: avoid scheduling in rtas_os_term()

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtasosterm It's unsafe to use rtasbusydelay to handle a busy status from the ibm,os-term RTAS function in rtasosterm: Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b BUG:...

PT-2025-40738

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc5-02182-gf8553a572277 Description The Linux kernel contains a flaw in the powerpc/rtas subsystem. Specifically, it is unsafe to use rtas busy delay to handle a busy status from the ibm,os-term RTAS functi...