CVE-2025-21431

Information disclosure may be there when a guest VM is connected...

CVE-2025-21431 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform

Information disclosure may be there when a guest VM is connected...

CVE-2025-21431

CVE-2025-21431 concerns a TOCTOU race condition in an Automotive OS Platform affecting Qualcomm chipsets. The vulnerability enables information disclosure when a guest VM is connected. Root cause and affected component are described in the CVE records and related entries (e.g., Red Hat and CVE li...

PT-2025-15206 · Qualcomm · Snapdragon +29

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Information disclosure may occur when a guest VM is connected. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Amazon Linux 2 : python3 (ALAS-2025-2817)

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2817 advisory. A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment we...

Medium: python3

Issue Overview: A vulnerability has been found in the CPython venv module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts ie "source venv/bin/activate". This means...

CVE-2025-1865 Local Privilege Escalation in Virtual CloneDrive Kernel Driver

The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM...

CVE-2025-1865

CVE-2025-1865 concerns a local privilege escalation in the Elby Virtual CloneDrive kernel driver. Documents consistently describe a function exposed to low-privileged users that fails to properly validate the privileges of the calling process, enabling creation of files at arbitrary locations wit...

CVE-2025-1865 Local Privilege Escalation in Virtual CloneDrive Kernel Driver

The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM...

Elby Virtual CloneDrive 访问控制错误漏洞

Elby Virtual CloneDrive is a virtual CD-ROM drive software from Elby that loads image files such as ISOs. An access control error vulnerability exists in Elby Virtual CloneDrive that stems from the kernel driver not properly validating calling process privileges, which could result in elevated...

HPE Aruba Networking Virtual Intranet Access (VIA) Client Installed (Windows)

Binary data hpearubanetworkingvirtualintranetaccessclientwininstalled.nbin...

PT-2025-29031

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: This issue resolves a critical lock within the iavf driver, eliminating error-prone logic associated with try locks. The resolution involves replacing the critical lock with a netdev...

HPE Aruba Networking Virtual Intranet Access (VIA) Client Installed (macOS)

Binary data hpearubanetworkingvirtualintranetaccessclientmacosinstalled.nbin...

CVE-2025-25041

A vulnerability in the HPE Aruba Networking Virtual Intranet Access VIA client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM root. A successful exploit could allow the creation of a Denial-of-Service DoS condition affecting the Microsoft Windows Operating System...

USN-7413-1: Linux kernel (IoT) vulnerabilities

Ziming Zhang discovered that the DRM driver for VMware Virtual GPU did not properly handle certain error conditions, leading to a NULL pointer dereference. A local attacker could possibly trigger this vulnerability to cause a denial of service. CVE-2022-38096 Ye Zhang and Nicolas Wu discovered th...

kernel: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several problems with the way hyp code lazily saves the host's FPSIMD/SVE state, including: Host SVE being discarded unexpectedly due to inconsistent...

kernel: KVM: Always flush async #PF workqueue when vCPU is being destroyed

In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush async PF workqueue when vCPU is being destroyed Always flush the per-vCPU async PF workqueue when a vCPU is clearing its completion queue, e.g. when a VM and all its vCPUs is being destroyed. KVM must ensure tha...

SUSE CVE-2025-21981

In the Linux kernel, the following vulnerability has been resolved: ice: fix memory leak in aRFS after reset Fix aRFS accelerated Receive Flow Steering structures memory leak by adding a checker to verify if aRFS memory is already allocated while configuring VSI. aRFS objects are allocated in two...

Linux Virtual Delivery Agent - ICA session crashes when resizing

When resizing the ICA Session Window, users might see that the session crashes...

CVE-2025-25041 Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client

A vulnerability in the HPE Aruba Networking Virtual Intranet Access VIA client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM root. A successful exploit could allow the creation of a Denial-of-Service DoS condition affecting the Microsoft Windows Operating System...