CVE-2022-50653 mmc: atmel-mci: fix return value check of mmc_add_host()

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehos...

CVE-2023-53847: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Fix uninit-value in alaudacheckmedia Syzbot got KMSAN to complain about access to an uninitialized value in the alauda subdriver of usb-storage: BUG: KMSAN: uninit-value in alaudatransport+0x462/0x57f0...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from mpicmpui not handling zero-value comparisons correctly, which could lead to a null pointer dereference...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper checking of the return value of mmcaddhost, which could lead to a memory leak and null pointer...

PT-2025-49776

Name of the Vulnerable Software and Affected Versions xmlseclibs versions prior to 3.1.4 Description xmlseclibs is a PHP library used for XML Encryption and Signatures. Versions of the library before 3.1.4 contain a flaw in the libxml2 canonicalization process during document transformation that...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked deviceregister return value, which could lead to a memory leak and null pointer dereference...

CVE-2025-48629

In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-48629

In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-48629

In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech recognizer app due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-48629

CVE-2025-48629 affects the Android framework component in which the insecure default for the default speech recognizer app can be exploited via the VoiceInteractionManagerService.findAvailRecognizer. The root cause is an insecure default value in this method, enabling local privilege escalation w...

XenServer Security Update for CVE-2025-62626

Severity: Medium Description of Problem A hardware issue has been identified in AMD Zen 5 CPU devices that may cause those CPUs to return a value of zero more frequently than statistically expected when asked to generate a random value. This may compromise e.g. cryptographic keys that are generat...

UBUNTU-CVE-2022-50618

In the Linux kernel, the following vulnerability has been resolved: mmc: meson-gx: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that allocated in mmcallochost is leaked. 2. In the remove path, mmcremovehost...

CVE-2022-50628

In the Linux kernel, the following vulnerability has been resolved: drm/gud: Fix UBSAN warning UBSAN complains about invalid value for bool: 101.165172 drm Initialized gud 1.0.0 20200422 for 2-3.2:1.0 on minor 1 101.213360 gud 2-3.2:1.0: drm fb1: guddrmfb frame buffer device 101.213426 usbcore:...

CVE-2022-50628 drm/gud: Fix UBSAN warning

In the Linux kernel, the following vulnerability has been resolved: drm/gud: Fix UBSAN warning UBSAN complains about invalid value for bool: 101.165172 drm Initialized gud 1.0.0 20200422 for 2-3.2:1.0 on minor 1 101.213360 gud 2-3.2:1.0: drm fb1: guddrmfb frame buffer device 101.213426 usbcore:...

PT-2025-50294

CVE-2025-14271 - Rejected reason: This CVE ID has been withdrawn by CVE ID : CVE-2025-14271 Published : Dec. 8, 2025, 4:15 p.m. | 38 minutes ago Description : Rejected reason: This CVE ID has been withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for more details, such a...

Linux snd_soc_set_dmi_name Buffer Overflow DoS

The vulnerability of the sndsocsetdminame function in the sound/soc/intel/boards/bytcrrt5651.c driver for the bytcrrt5640 sound card in the Linux operating system is related to the lack of checking the returned value. Exploiting this vulnerability could allow a remote attacker to cause a service...

Linux Copy From User Heap Buffer Overflow DoS

The vulnerability of the copyfromuser function in the arch/sparc/lib/U3memcpy.S file of the Linux operating system’s kernel is related to the lack of a check on the returned value. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

Linux block blk-mq-sysfs Heap Buffer Overflow Privilege Escalation

The vulnerability of the blkmqupdatenrhwqueues function in the block/blk-mq-sysfs.c module, which supports the block-level kernel in the Linux operating system, is related to the lack of checking the returned value. Exploiting this vulnerability could allow a remote attacker to gain elevated...

drivers/perf/riscv_pmu_sbi.c Heap Buffer Overflow DoS

Vulnerability of the pmusbiovfhandler function in the drivers/perf/riscvpmusbi.c module – The driver for monitoring kernel performance in Linux systems lacks a check for the return value. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2022-50628

In the Linux kernel, the following vulnerability has been resolved: drm/gud: Fix UBSAN warning UBSAN complains about invalid value for bool: 101.165172 drm Initialized gud 1.0.0 20200422 for 2-3.2:1.0 on minor 1 101.213360 gud 2-3.2:1.0: drm fb1: guddrmfb frame buffer device 101.213426 usbcore:...