Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninitialized value issue in hfsplusdeletecat, which could cause the kernel to crash...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a lack of boundary checking for map-maxosd, which could lead to out-of-bounds access...

PT-2025-51728

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where an incorrect error return value during device probe can lead to system instability. Specifically, after DME Link Startup, a failure during drive...

Linux kernel fs/fat/inode.c Heap Buffer Overflow DoS

The vulnerability of the sbminblocksize function in the fs/fat/inode.c module of the Linux kernel file system is related to the lack of checking of the returned value. Exploiting this vulnerability can allow a remote attacker to increase privileges or cause service failures...

CVE-2025-68313: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness while incorrectly signaling success...

CVE-2025-40351: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in hfsplusdeletecat The syzbot reported issue in hfsplusdeletecat: 70.682285 T9333 ===================================================== 70.682943 T9333 BUG: KMSAN: uninit-value in...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked kcalloc return value that could lead to a null pointer dereference...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated devicenodetoregmap return value that could result in a null pointer dereference...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an improperly set default value when creating a CQ in mlx5, which could lead to a null pointer exception...

PT-2025-51641

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The create in format blob function in the Linux kernel’s DRM/plane subsystem could return a NULL pointer instead of a valid pointer or an error value. This could lead to a system crash...

CVE-2025-14667

A security vulnerability has been detected in itsourcecode COVID Tracking System 1.0. The impacted element is an unknown function of the file /admin/?page=systeminfo. Such manipulation of the argument metavalue leads to sql injection. The attack may be performed from remote. The exploit has been...

yara:rules_fuzzer: Use-of-uninitialized-value in yr_parse_re_string

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5251822974730240 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

yara:rules_fuzzer: Use-of-uninitialized-value in yara_yyparse

Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=4654647131570176 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: rulesfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

iwlwifi DoS

The vulnerability of the iwlwifi component in Linux operating systems is related to an unvalidated return value. Exploiting this vulnerability allows a attacker to cause a service failure...

drm/tegra Component DoS

The vulnerability of the drm/tegra component in the Linux operating system is related to an unvalidated return value. Exploiting this vulnerability allows a perpetrator to cause service failures...

PT-2025-51218

Name of the Vulnerable Software and Affected Versions Wekan versions prior to 18.16 Description An issue exists in Wekan, an open-source kanban board system, where unauthenticated attackers can modify a board's "sort" value. The Boards.allow function does not verify the user ID, enabling...

PT-2025-51231

NetSupport Manager 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gateway HTTPS request handling. The server evaluates request URIs using an unsanitized SQLite query against the FileLinks table in gateway.db. By injecting SQL through the LinkName/URI...

CVE-2025-65779

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Unauthenticated attackers can update a board's "sort" value Boards.allow returns true without verifying userId, allowing arbitrary reordering of boards...

CVE-2025-65779

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Unauthenticated attackers can update a board's "sort" value Boards.allow returns true without verifying userId, allowing arbitrary reordering of boards...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the qla4xxxgetepfwdb function in the qla4xxx driver for Linux kernel involves insufficient checking of return values. Exploiting this vulnerability allows attackers to cause system failures...