685 matches found
CVE-2025-40184
The CVE-2025-40184 entry documents a Linux kernel KVM/arm64 vulnerability: when using transparent huge pages with NVHE EL2 debug, the debug check in assert_host_shared_guest() may trigger a WARN_ON leading to a host panic. The issue arises because __pkvm_host_relax_perms_guest() assumes a single-...
CVE-2025-40184 KVM: arm64: Fix debug checking for np-guests using huge mappings
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix debug checking for np-guests using huge mappings When running with transparent huge pages and CONFIGNVHEEL2DEBUG then the debug checking in asserthostsharedguest fails on the launch of an np-guest. This WARNON...
Empower and Accelerate Your SOC with the Blue Agent
Meet the Blue Agent: AI-powered threat triage built on the Wiz platform. Investigate every threat with speed and transparency...
Empower and Accelerate Your SOC with the Wiz SecOps AI Agent
Meet the SecOps AI Agent: AI-powered threat triage built on the Wiz platform. Investigate every threat with speed and transparency...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989158)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989158 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: khugepaged: skip huge page collapse for special files The read-only THP for filesystems will...
APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign
A Pakistan-nexus threat actor has been observed targeting Indian government entities as part of spear-phishing attacks designed to deliver a Golang-based malware known as DeskRAT. The activity, observed in August and September 2025 by Sekoia, has been attributed to Transparent Tribe aka APT36, a...
OSV-2025-855 Use-of-uninitialized-value in AlphaReplace_SSE2
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=454314139 Crash type: Use-of-uninitialized-value Crash state: AlphaReplaceSSE2 WebPReplaceTransparentPixels WebPEncode...
Forward to Hell? on the Potentials of Misusing Transparent DNS Forwarders in Reflective Amplification Attacks
The DNS infrastructure is infamous for facilitating reflective amplification attacks. Various countermeasures such as server shielding, access control, rate limiting, and protocol restrictions have been implemented. Still, the threat remains throughout the deployment of DNS servers. In this paper...
CVE-2022-50517
In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: do not clobber swpentryt during THP split The following has been observed when running stressng mmap since commit b653db77350c "mm: Clear page-private when splitting or migrating a page" watchdog: BUG: soft lockup ...
EUVD-2009-1210
Malware in sbrugna...
EUVD-2001-0494
Malware in sbrugna...
EUVD-2011-2468
Malware in sbrugna...
EUVD-2013-0327
Malware in sbrugna...
EUVD-2009-0799
Malware in sbrugna...
EUVD-2020-7909
Malware in sbrugna...
EUVD-2009-0800
Malware in sbrugna...
EUVD-2011-1010
Malware in sbrugna...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a corruption of swpentryt during THP splitting, which could lead to a soft lockup...