org.cassandraunit:cassandra-unit (>=1.1.1.1, <=1.1.1.3) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (1.1.5)

org.apache.cassandra:cassandra-all MAVEN version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - org.cassandraunit:cassandra-unit =1.1.1.1, =1.1.1.3 Source cves: CVE-2025-23015 Source...

org.cassandraunit:cassandra-unit (0.8.0.3.1) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (0.8.7)

org.apache.cassandra:cassandra-all MAVEN version 0.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - org.cassandraunit:cassandra-unit 0.8.0.3.1 Source cves: CVE-2025-23015 Source advisory:...

org.cassandraunit:cassandra-unit (>=0.8.0.2.1, <=0.8.0.2.4) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (0.8.2)

org.apache.cassandra:cassandra-all MAVEN version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - org.cassandraunit:cassandra-unit =0.8.0.2.1, =0.8.0.2.4 Source cves: CVE-2025-23015 Source...

me.prettyprint:hector-test (>=1.0-2, <=1.0-4), org.cassandraunit:cassandra-unit (1.0.3.1) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (1.0.6)

org.apache.cassandra:cassandra-all MAVEN version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - me.prettyprint:hector-test =1.0-2, =1.0-4 - org.cassandraunit:cassandra-unit 1.0.3.1 Source...

CVE-2025-0015

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to make improper GPU processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r48...

Security update for qemu

This update for qemu fixes the following issues: Update to version 8.2.5: target/loongarch: fix a wrong print in cpu dump ui/sdl2: Allow host to power down screen target/i386: fix SSE and SSE2 feature check target/i386: fix xsave.flat from kvm-unit-tests disas/riscv: Decode all of the pmpcfg and...

Qualcomm Chipsets: Input validation error vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when processing IOCTL from user space to handle GPU AHB bus errors...

PT-2025-2779 · Imagination Technologies · Graphics Ddk

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, triggering use-after-free kernel exceptions. Recommendations: At the moment, ther...

Cianet ONU GW24AC code injection vulnerability

The Cianet ONU GW24AC is a network device from Cianet. A code injection vulnerability exists in the Cianet ONU GW24AC version 20250127 and prior versions, which stems from the fact that incorrect operation of the parameter browserLang can lead to cross-site scripting attacks...

mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device

...

E.U. Sanctions 3 Russian Nationals for Cyber Attacks Targeting Estonia's Key Ministries

The Council of the European Union has sanctioned three individuals for allegedly carrying out "malicious cyber activities" against Estonia. The three Russian nationals – Nikolay Alexandrovich Korchagin, Vitaly Shevchenko, and Yuriy Fedorovich Denisov – are officers of the General Staff of the Arm...

Magma code issues and vulnerabilities

Magma is an open source software platform from Magma Open Source. An open, flexible and scalable mobile core network solution for network operators. A code issue vulnerability exists in Magma 1.8.0 and prior versions, which stems from the fact that the absence of the mandatory NASPDU field in the...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the dwmac-tegra driver in the net/stmmac module not correctly reading the IOMMU stream ID in the device...

PT-2025-1391 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6

Name of the Vulnerable Software and Affected Versions: Mercedes Benz head-unit NTG 6 affected versions not specified Description: The Mercedes Benz head-unit NTG 6 contains functions to import or export profile settings over USB. During parsing, it is possible to trigger a crash of the service...

CVE-2024-57908 iio: imu: kmx61: fix information leak in triggered buffer

In the Linux kernel, the following vulnerability has been resolved: iio: imu: kmx61: fix information leak in triggered buffer The 'buffer' local array is used to push data to user space from a triggered buffer, but it does not set values for inactive channels, as it only uses...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an improperly set maximum unit name length...

Mercedes-Benz Head Unit security research report

Introduction This report covers the research of the Mercedes-Benz Head Unit, which was made by our team. Mercedes-Benz's latest Head Unit infotainment system is called Mercedes-Benz User Experience MBUX. We performed analysis of the first generation MBUX. MBUX was previously analysed by KeenLab...

PT-2025-1226

Name of the Vulnerable Software and Affected Versions Mercedes-Benz head-unit NTG6 affected versions not specified Description The issue is related to insufficient input validation in the UserDataExchangeServiceClient::unpackVoiceTagArchiveOptimized function of the Mercedes-Benz User Experience...

PT-2025-1228 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue is related to a race condition in the Mercedes-Benz head-unit NTG6, which can be exploited by connecting to the Ethernet pins on the Base Board. This allows a...

PT-2025-1230 · Mercedes Benz · Mbux +1

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 Description: The issue is related to the Mercedes-Benz head-unit NTG6, which has Ethernet pins on the Base Board to connect the module CSB. An attacker can connect to these pins and gain access to the internal...