pcapplusplus:FuzzTargetNg: Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6042969818071040 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTargetNg Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Verifiably Forgotten? Gradient Differences Still Enable Data Reconstruction in Federated Unlearning

Federated Unlearning FU has emerged as a critical compliance mechanism for data privacy regulations, requiring unlearned clients to provide verifiable Proof of Federated Unlearning PoFU to auditors upon data removal requests. However, we uncover a significant privacy vulnerability: when gradient...

Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

CVE-2025-26783

An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, W1000, Modem 5300, and Modem 5400. Incorrect handling of undefined values leads to a Denial of Service...

Important: Red Hat Security Advisory: redis:7 security update

An update for the redis:7 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header

A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function...

kernel: cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value

A flaw was found in the Linux kernel's AMD P-State processor frequency driver. A local user could exploit this flaw to cause a Denial of Service DoS by crashing the system. This issue occurs because the driver fails to validate the return value of an internal CPU lookup function, leading to a...

kernel: bpf, lsm: Add check for BPF LSM return value

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF and Linux Security Module LSM subsystems. A privileged local attacker could exploit this by attaching a BPF program that returns a positive number to the fileallocsecurity hook. This misinterpretation of the return value by the fil...

kernel: wifi: rtw89: check return value of ieee80211_probereq_get() for RNR

A flaw was found in the Linux kernel's rtw89 wireless driver. A local user can cause a Denial of Service DoS through a system crash triggered by a null pointer dereference. This issue occurs because the driver fails to properly validate the return value when handling wireless probe request frames...

kernel: ppp: fix ppp_async_encode() illegal access

A flaw was found in the Linux kernel's Point-to-Point Protocol PPP implementation. A local attacker can exploit this vulnerability by sending a specially crafted message with a zero size to the pppoesendmsg function, which leads to an uninitialized value being used in the pppasyncencode function...

kernel: md/raid10: fix null ptr dereference in raid10_size()

A flaw was found in the Linux kernel's md/raid10 component. A local attacker could trigger a null pointer dereference in the raid10size function. This occurs when an internal function returns zero, but a critical data structure remains uninitialized, leading to a system crash. This vulnerability...

kernel: udf: fix uninit-value use in udf_get_fileshortad

In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udfgetfileshortad Check for overflow when computing alen in udfcurrentaext to mitigate later uninit-value use in udfgetfileshortad KMSAN bug1. After applying the patch reproducer did not trigger any...

kernel: tcp_bpf: fix return value of tcp_bpf_sendmsg()

A flaw was found in the Linux kernel's tcpbpf component. A local attacker with low privileges could exploit a vulnerability in the tcpbpfsendmsg function. This flaw occurs when messages are handled in a specific way, leading to an unexpected negative return value. Successful exploitation can caus...

CVE-2025-32756

A stack-based buffer overflow vulnerability CWE-121 vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8,...

Securing WiFi Fingerprint-Based Indoor Localization Systems from Malicious Access Points

WiFi fingerprint-based indoor localization schemes deliver highly accurate location data by matching the received signal strength indicator RSSI with an offline database using machine learning ML or deep learning DL models. However, over time, RSSI values degrade due to the malicious behavior of...

graphicsmagick:coder_HEIF_fuzzer: Use-of-uninitialized-value in fillIntraPredModeCandidates

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6008683345805312 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderHEIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

CVE-2025-37889

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platformmax as control value This reverts commit 9bdd10d57a88 "ASoC: ops: Shift tested values in sndsocputvolsw by +min", and makes some additional related updates. There are two ways the platformmax...

MaxKB security vulnerability

MaxKB is a 1Panel-dev open source open source knowledge base question and answer system based on a large language model and RAG. A security vulnerability exists in MaxKB 1.10.7 and earlier versions, which stems from a CSV injection in the component Knowledge Base Module...

SUSE CVE-2022-49790

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting uninitialized value at iforceinitdevice 1, for commit 6ac0aec6b0a6 "Input: iforce - allow callers supply data buffer when fetching device IDs"...

SUSE CVE-2022-49839

In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportsas: Fix error handling in sasphyadd If transportadddevice fails in sasphyadd, the kernel will crash trying to delete the device in transportremovedevice called from sasremovehost. Unable to handle kernel NULL...