12662 matches found
CVE-2025-38699
In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfadimprobe function fails during initialization, the memory pointed to by bfad-im is freed without setting bfad-im to NULL. Subsequently, during driver uninstallation, when the state machine...
UBUNTU-CVE-2025-38699
In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfadimprobe function fails during initialization, the memory pointed to by bfad-im is freed without setting bfad-im to NULL. Subsequently, during driver uninstallation, when the state machine...
PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
...
block: fix race between set_blocksize and read paths
...
PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
...
net/packet: fix a race in packet_set_ring() and packet_notifier()
...
can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode
...
i40e: Do not allow untrusted VF to remove administratively set MAC
...
netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
...
Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
...
serial: sc16is7xx: fix invalid FIFO access with special register set
...
CVE-2025-9813
A vulnerability was identified in Tenda CH22 1.0.0.1. This issue affects the function formSetSambaConf of the file /goform/SetSambaConf. The manipulation of the argument sambauserNameSda leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available an...
The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.
...
cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost
...
scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
...
CVE-2025-50755
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsyscmd function via the command parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2025-50757
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsysadm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2024-48705
Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...
PT-2025-36055
Name of the Vulnerable Software and Affected Versions: VoicemailNotificationSettingsUtil.java affected versions not specified Description: A cross-user data leak exists due to a confused deputy condition within the setRingtoneUri function of the VoicemailNotificationSettingsUtil.java file. This...
PT-2025-36049
Name of the Vulnerable Software and Affected Versions: AssociationRequest.java affected versions not specified Description: A logic error in the setDisplayName function within the AssociationRequest.java file may allow an application to retain CDM association. This could potentially lead to local...