OESA-2025-2744 wireshark security update

Security Fixes: Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service due to access of uninitialized pointerCVE-2025-13499...

OESA-2025-2745 wireshark security update

Security Fixes: Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service due to access of uninitialized pointerCVE-2025-13499...

The vulnerability of the Virtual GPU Manager driver on NVIDIA Virtual GPUs allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Virtual GPU Manager driver component of NVIDIA’s Virtual GPU technology relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...

CVE-2025-13674 Access of Uninitialized Pointer in Wireshark

BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...

CVE-2025-13674 Access of Uninitialized Pointer in Wireshark

BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...

CVE-2025-13674

CVE-2025-13674 affects Wireshark 4.6.0: BPv7 protocol dissector crash can cause denial of service. Multiple Nessus entries corroborate a BPv7 dissector crash in 4.6.0 and note that upgrade to 4.6.3 or later mitigates the issue. The vulnerability is a crash caused by a BPv7 parser crash in Wiresha...

CVE-2025-13674 Access of Uninitialized Pointer in Wireshark

BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...

CVE-2025-13674: Access of Uninitialized Pointer

BPv7 dissector crash in Wireshark 4.6.0 allows denial of service...

CVE-2025-13499 Access of Uninitialized Pointer in Wireshark

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service...

CVE-2025-13499 Access of Uninitialized Pointer in Wireshark

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service...

CVE-2025-13499

CVE-2025-13499 affects Wireshark and is described in multiple advisories as a Kafka dissector crash leading to denial of service. The root cause is an access of an uninitialized pointer in the Kafka dissector. Public references across Debian, Fedora, and other feeds indicate this vulnerability is...

CVE-2025-13499 Access of Uninitialized Pointer in Wireshark

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service...

CVE-2025-13499: Access of Uninitialized Pointer

Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service...

Siemens SCALANCE and RUGGEDCOM Devices Access of Uninitialized Pointer (CVE-2024-57874)

arm64: ptrace: vulnerability due to an uninitialized variable in the taggedaddrctrlset function, leading to potential memory leakage from the kernel stack when a zero-length SETREGSET call is made, exposing up to 64 bits of memory. This plugin only works with Tenable.ot. Please visit...

Vulnerability of the process_update_result() function in the drivers/md/dm-vdo/dedupe.c module – A driver for supporting multiple device types (RAID and LVM) in the Linux kernel, which allows a hacker to cause service failure.

Vulnerability of the processupdateresult function in the drivers/md/dm-vdo/dedupe.c module – The driver for supporting multiple devices RAID and LVM in the Linux kernel is vulnerable due to the lack of protection against accessing an uninitialized pointer. Exploiting this vulnerability could allo...

Vulnerability of the dummy_urb_enqueue() function in the drivers/usb/gadget/udc/dummy_hcd.c module – A driver for supporting USB gadgets in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the dummyurbenqueue function in the drivers/usb/gadget/udc/dummyhcd.c module – The Linux device driver framework relies on access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause service failure...

CVE-2025-40155

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

CVE-2025-40155 iommu/vt-d: debugfs: Fix legacy mode page table dump logic

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault,...

CVE-2025-40127 hwrng: ks-sa - fix division by zero in ks_sa_rng_init

In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in kssarnginit Fix division by zero in kssarnginit caused by missing clock pointer initialization. The clkgetrate call is performed on an uninitialized clk pointer, resulting in division by zer...

kernel: usbnet: fix memory leak in error case

In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnetwritecmdasync mixed up which buffers need to be freed in which error case. v2: add Fixes tag v3: fix uninitialized buf pointer...