Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from tcmlooptpgaddressshow not checking the tlhba-sh pointer, which could result in a null pointer dereference...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: usb: Potential integer overflow in usbgmaketpg The variable tpgt in usbgmaketpg is defined as unsigned long and is assigned to tpgt-tporttpgt, which is defined as u16. This may cause an integer overflow when tpgt exceeds USHRTMAX...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-394240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-394240 advisory. In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpgalloc In tpgalloc, resources should be deallocated in ea...

EUVD-2023-36361

Malicious code in bioql PyPI...

EUVD-2025-20493

Malicious code in bioql PyPI...

EUVD-2024-34303

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-27078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: v4l2-tpg: fix some memleaks in tpgalloc In tpgalloc, resources should be deallocated ...

CVE-2025-21426

Memory corruption while processing camera TPG write request...

CVE-2025-21426

Memory corruption while processing camera TPG write request...

CVE-2025-21426 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Memory corruption while processing camera TPG write request...

CVE-2025-21426

CVE-2025-21426 describes a memory corruption issue in Qualcomm chipsets when processing camera TPG write requests (Camera_Linux). The vulnerability is characterized as a classic buffer copy without checking input size, leading to potential corruption affecting confidentiality, integrity, and avai...

CVE-2025-21426: Buffer Copy without Checking Size of Input

Memory corruption while processing camera TPG write request...

PT-2025-28431 · Qualcomm · Snapdragon +10

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs while processing camera TPG write requests. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

AZL-64689 CVE-2025-38226 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 inline BUG: KASAN: vmalloc-out-of-bounds in...

DEBIAN-CVE-2025-38226

In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 inline BUG: KASAN: vmalloc-out-of-bounds in...

CVE-2025-38226: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 inline BUG: KASAN: vmalloc-out-of-bounds in...

PT-2025-28001

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 Description: A bug was found in the Linux kernel, specifically in the media subsystem, where the composition size cannot be larger than the size of fmt cap rect. This iss...

CVE-2023-32093

Cross-Site Request Forgery CSRF vulnerability in Criss Swaim TPG Redirect plugin = 1.0.7 versions...

SUSE CVE-2025-22083

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhostscsisetendpoint If vhostscsisetendpoint is called multiple times without a vhostscsiclearendpoint between them, we can hit multiple bugs found by Haoran Zhang: 1. Use-after-free...

DEBIAN-CVE-2025-22083

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhostscsisetendpoint If vhostscsisetendpoint is called multiple times without a vhostscsiclearendpoint between them, we can hit multiple bugs found by Haoran Zhang: 1. Use-after-free...