Vulnerabilities of the functions nvme_tcpFetchRequest(), nvme_tcpInitRequest(), nvme_tcpHandleR2T(), and nvme_tcpSubmitAsyncEvent() in the Linux operating system’s kernel, allowing a hacker to cause a service failure

The vulnerabilities of the functions nvmetcpFetchRequest, nvmetcpInitRequest, nvmetcpHandleR2T, and nvmetcpSubmitAsyncEvent driver/nvme/host/tcp.c in the Linux kernel involve executing a loop with an unreachable exit condition. Exploiting these vulnerabilities can allow an attacker to cause servi...

USN-7789-2: Linux kernel (Raspberry Pi) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

EUVD-2019-6788

Malware in sbrugna...

EUVD-2016-8954

Malware in sbrugna...

EUVD-2017-18632

Malware in sbrugna...

EUVD-2025-32016

Malicious code in bioql PyPI...

EUVD-2025-17018

Malicious code in bioql PyPI...

EUVD-2025-17009

Malicious code in bioql PyPI...

Storage Performance Development Kit 安全漏洞

Storage Performance Development Kit SPDK is a storage performance development kit from the SPDK community. The product is primarily used for writing high-performance, scalable user-mode storage applications. A security vulnerability exists in Storage Performance Development Kit SPDK version 25.05...

K000156609: GNU C Library for IBM POWER vulnerability CVE-2025-5702

Security Advisory Description The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI,...

USN-7771-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

USN-7765-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...

USN-7704-3 linux-ibm, linux-intel-iotg, linux-oracle, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...

USN-7704-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...

Oracle Linux 10 : kernel (ELSA-2025-12662)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-12662 advisory. - netsched: hfsc: Address reentrant enqueue adding class to eltree twice - CVE-2025-38001 - schhfsc: Fix qlen accounting bug when using peek in...

CVE-2025-7742: Authentication Bypass Using an Alternate Path or Channel

An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile storage. This action may result in remote code execution that allows an attacker to run arbitrary commands on the target...

nvme-rdma: unquiesce admin_q before destroy it

...

MalVol-25: a Diverse, Labelled and Detailed Volatile Memory Dataset for Malware Detection and Response Testing and Validation

This paper addresses the critical need for high-quality malware datasets that support advanced analysis techniques, particularly machine learning and agentic AI frameworks. Existing datasets often lack diversity, comprehensive labelling, and the complexity necessary for effective machine learning...

SUSE CVE-2025-5702

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

DEBIAN-CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...