CVE-2025-23159 media: venus: hfi: add a check to handle OOB in sfr region

In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr-bufsize is in shared memory and can be modified by malicious user. OOB write is possible when the size is made higher than actual sfr data buffer. Cap the size to...

The vulnerability of the Rsync file transfer and synchronization utility is related to synchronization errors when using a shared resource, allowing a perpetrator to gain increased privileges.

The vulnerability of the Rsync file transfer and synchronization utility is related to synchronization errors when using a shared resource during the processing of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-0467

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

GL.iNet Router 安全漏洞

GL.iNet Router is a series of routers from China's Guanglian Zhitong GL.iNet company. A security vulnerability exists in GL.iNet Router that originates from a buffer overflow in the plugins.so file of the RPC Handler component...

ADM - CPU utilization is increasing and Debug is enabled

High Load on the CPU at Random time, collect the bundle and shared...

CVE-2023-44755

creationtimestamp| type| source ---|---|--- 2025-04-23 15:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114388062012835574...

PT-2025-17628

Name of the Vulnerable Software and Affected Versions: Intel Atom processors affected versions not specified Description: The issue is caused by a shared microarchitectural predictor state that influences transient execution for some Intel Atom processors. This may allow an authenticated user to...

OESA-2025-1435 cobbler security update

Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs and rsync mirrors,...

CVE-2025-0467

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory...

CVE-2025-43703

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API even though the attacker has no knowledge of an API key through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists...

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that originates from kernel software in Guest VM that may utilize shared memory to write GPU firmware data...

Vulnerability of the drm_getunique() function in the drivers/gpu/drm/drm_ioctl.c module – The DRI driver for Linux kernel allows a hacker to trigger a service failure.

Vulnerability of the drmgetunique function in the drivers/gpu/drm/drmioctl.c module – The driver for Linux’s Direct Rendering Infrastructure DRI has a synchronization error when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the cifs_compose_mount_options() function in the fs/smb/client/cifsproto.h module, a support module for the SMB client in Linux kernel, allows a hacker to trigger a service failure.

The vulnerability of the cifscomposemountoptions function in the fs/smb/client/cifsproto.h module, which is part of the SMB client support in Linux kernel, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the sock_map_lookup_sys() function in the net/core/sock_map.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sockmaplookupsys function in the net/core/sockmap.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the encrypted() function in the cross-platform framework for developing Qt software allows a hacker to induce a service failure.

The vulnerability of the encrypted function in the cross-platform framework for Qt software development is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

DEBIAN-CVE-2025-23129

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Clear affinity hint before calling ath11kpcicfreeirq in error path If a shared IRQ is used by the driver due to platform limitation, then the IRQ affinity hint is set right after the allocation of IRQ vectors in...

DEBIAN-CVE-2025-22128

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Clear affinity hint before calling ath12kpcifreeirq in error path If a shared IRQ is used by the driver due to platform limitation, then the IRQ affinity hint is set right after the allocation of IRQ vectors in...

CVE-2025-43703

Anki (Ankitects) up to version 25.02 is affected by CVE-2025-43703, which allows attacker-controlled access to the internal API via a crafted shared deck, even without knowledge of an API key. The issue stems from an incomplete fix for CVE-2024-32484 and can be triggered through methods such as s...

CVE-2025-43703

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API even though the attacker has no knowledge of an API key through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists...

CVE-2025-43703

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API even though the attacker has no knowledge of an API key through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists...