PT-2025-49452

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Network File System Daemon NFSD component of the Linux kernel. Specifically, a crash can occur within the nfsd4 read release function when tracing is enabled,...

The vulnerability in the trace.c component of the Linux operating system’s kernel allows a hacker to compromise data integrity.

The vulnerability of the trace.c component in the Linux operating system’s kernel is related to reading data beyond the permissible buffer size. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

The vulnerability of the kernel/trace component of the Linux operating system allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the kernel/trace component of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the kernel/trace/trace_fprobe.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the kernel/trace/tracefprobe.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the kernel/trace/bpfTrace.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kernel/trace/bpfTrace.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `trace/ring_buffer.c` component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability in the trace/ringbuffer.c component of the Linux operating system’s kernel relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

ceph: blocklist the kclient when receiving corrupted snap trace

...

Malicious code in otlp-trace-export (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47708 Malicious code in otlp-trace-export (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in nodejs-example-google-cloud-trace (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47700 Malicious code in nodejs-example-google-cloud-trace (npm)

--- -= Per source details. Do not edit below this line.=-...

Remote Code Execution (RCE)

picklescan is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe deserialization/execution because trace.Trace.runctx can be used to execute code from untrusted pickle or otherwise crafted inputs in the interpreter context, allowing arbitrary code execution...

Remote Code Execution (RCE)

picklescan is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe deserialization due to trace.Trace.run executing code from untrusted pickle files, which can execute arbitrary code when a malicious pickle is loaded...

PT-2025-55037

Уязвимость функции osnoise cpus write модуля kernel/trace/trace osnoise.c поддержки трассировки ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

trace/fgraph: Fix the warning caused by missing unregister notifier

...

ftrace: Fix potential warning in trace_printk_seq during ftrace_dump

...

Linux Distros Unpatched Vulnerability : CVE-2023-53408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - trace/blktrace: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over...

Linux Distros Unpatched Vulnerability : CVE-2023-53312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: fix netdevstartxmit trace event vs skbtransportoffset After blamed commit, we must be...

CVE-2023-53408

In the Linux kernel, the following vulnerability has been resolved: trace/blktrace: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove instea...

Security Bulletin: Sensitive Information Disclosure in IBM Lakehouse Through Stack Traces , affects watsonx.data

Summary IBM Lakehouse could potentially reveal sensitive information from stack traces that could be read by a local privileged user. This can affect watsonx.data. Vulnerability Details CVEID:CVE-2025-36146 DESCRIPTION: IBM Lakehouse could potentially reveal sensitive information from stack trace...