PT-2025-33573

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s comedi subsystem, specifically within the pcl812 driver. An unchecked integer value, it-options1, received from userspace, can lead to a bit shift...

UBUNTU-CVE-2025-38230

In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount to prevent crashes Validate dbagheight, dbagwidth, and dbagstart in dbMount to catch corrupted metadata early and avoid undefined behavior in dbAllocAG. Limits are derived from L2LPERCTL,...

drivers/irqchip/irq-gic-v3-its Module Use-After-Free

Vulnerability of the itsvpeirqdomainalloc function in the drivers/irqchip/irq-gic-v3-its.c module – The Linux kernel’s IRQ chip support driver is vulnerable to a single-shift error. Exploiting this vulnerability could allow an attacker to access protected information...

Linux kernel TCPM DoS

Vulnerability of the tcpmpdset function in the drivers/usb/typec/tcpm/tcpm.c module – The driver that supports the Type-C controller interface in Linux kernel is vulnerable to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux mm/mremap.c DoS

The vulnerability of the mm/mremap.c module in the Linux operating system is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

AMD hdcp_cmd_is_read Structure DoS

Vulnerability of the hdcpcmdisread structure in the drivers/gpu/drm/amd/display/dc/hdcp/hdcpmsg.c module – Drivers for AMD graphics cards supporting Direct Rendering Infrastructure DRI in Linux operating systems are vulnerable to a single-shift error. Exploiting this vulnerability can allow...

Linux kernel nl80211 Buffer Overflow DoS

The vulnerability of the const nlapolicy nl80211policy structure in the net/wireless/nl80211.c module of the Linux kernel is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Synology Replication Service RCE

The vulnerability of the remote access and replication server of Synology Replication Service, as well as the corporate-level servers of Synology Unified Controller and Synology DiskStation Manager DSM, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to...

FreeBSD Hypervisor Code Execution

The vulnerability of the hypervisor in FreeBSD operating systems relates to a single-shift error. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Linux kernel IB/hfi1 Code Execution

The vulnerability of the IB/hfi1 components of the Linux operating system’s kernel is related to a single-shift error. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

Linux Kernel Data Compromise

The vulnerability of the new kernel component in the Linux operating system is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2023-52764 media: gspca: cpia1: shift-out-of-bounds in set_flicker

In the Linux kernel, the following vulnerability has been resolved: media: gspca: cpia1: shift-out-of-bounds in setflicker Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int' When the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a shift problem in ufshcdclearcmd...

Apache Tomcat DoS

The vulnerability of the Apache Tomcat application server is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause service failures...

OpenImageIO Single-Shift Confidential Data Access

The vulnerability of the OpenImageIO image processing library is related to a single-shift error. Exploiting this vulnerability could allow an attacker to gain access to confidential data using a distorted RLA file...

QEMU sdhci.c DoS

The vulnerability of the sdhci.c component of the QEMU hardware emulator is related to a single-shift error. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

SUSE CVE-2015-1593

The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it easier for attackers to bypass the ASLR protection mechanism by predicting the address of the top of the stack, related ...

Libtasn1 asn1_encode_simple_der Disclosure DoS

The vulnerability of the asn1encodesimpleder function in the Libtasn1 library is related to a single-shift error. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures by sending specially crafted data to the application...

GLSA-202210-31 : OpenEXR: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-31 OpenEXR: Multiple Vulnerabilities - A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. T...

OESA-2022-1868 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by...