CVE-2025-40340

CVE-2025-40340 is addressed in Root OS packaging (rootio-linux). Connected OSV entries show fixes for Root:Debian:13 and patches for Root:Ubuntu:22.04 and Root:Ubuntu:24.04, among others, with multiple fixed versions available. This indicates the vulnerability is not in the Linux kernel itself in...

CVE-2025-40219

CVE-2025-40219 concerns the Linux kernel SR-IOV PCI handling. The vulnerability stems from missing serialization locks around SR-IOV VF removal/enabling: sriov_disable() could remove VF PCI devices without holding the global PCI rescan-remove lock, risking double-remove/list corruption (notably o...

PT-2025-53014

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel’s Panthor DRM driver contains a use-after-free issue. The panthor fw unplug function frees firmware memory sections, but pending firmware events may still be processing ...

CVE-2025-58149 Incorrect removal of permissions on PCI device unplug

When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the permission leak allo...

CVE-2025-58149

CVE-2025-58149 affects the Xen hypervisor. The detach logic for PCI devices fails to remove access permissions to 64‑bit memory BARs when a device is unplugged, allowing PV guests to access memory of devices no longer assigned to them (HVM implications noted with required compromised device model...

Siemens SIMATIC Devices Use After Free (CVE-2023-47233)

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For physically proximate attackers with local access, this could be exploited in a real world scenario. This is related to...

EUVD-2015-7200

Malware in sbrugna...

EUVD-2017-14629

Malware in sbrugna...

EUVD-2016-1343

Malware in sbrugna...

EUVD-2017-14680

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414307 advisory. The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a...

EUVD-2025-31942

Malicious code in bioql PyPI...

EUVD-2025-31986

Malicious code in bioql PyPI...

EUVD-2025-25577

Malicious code in bioql PyPI...

EUVD-2025-13187

Malicious code in bioql PyPI...

EUVD-2024-51904

Malicious code in bioql PyPI...

EUVD-2023-43974

Malicious code in bioql PyPI...

EUVD-2025-11276

Malicious code in bioql PyPI...

EUVD-2023-59819

Malicious code in bioql PyPI...

EUVD-2024-53854

Malicious code in bioql PyPI...