kernel: nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()

In the Linux kernel, the following vulnerability has been resolved: nfp: flower: Fix a potential leak in nfptunneladdsharedmac idasimpleget returns an id between min 0 and max NFPMAXMACINDEX inclusive. So NFPMAXMACINDEX 0xff is a valid id. In order for the error handling path to work correctly, t...

kernel: wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration

In the Linux kernel, the following vulnerability has been resolved: wifi: mac8021: fix possible oob access in ieee80211getrateduration Fix possible out-of-bound access in ieee80211getrateduration routine as reported by the following UBSAN report: UBSAN: array-index-out-of-bounds in...

kernel: net: xfrm: unexport __init-annotated xfrm4_protocol_init()

In the Linux kernel, the following vulnerability has been resolved: net: xfrm: unexport init-annotated xfrm4protocolinit EXPORTSYMBOL and init is a bad combination because the .init.text section is freed up after the initialization. Hence, modules cannot use symbols annotated init. The access to ...

kernel: dm thin: Fix UAF in run_timer_softirq()

In the Linux kernel, the following vulnerability has been resolved: dm thin: Fix UAF in runtimersoftirq When dmresume and dmdestroy are concurrent, it will lead to UAF, as follows: BUG: KASAN: use-after-free in runtimers+0x173/0x710 Write of size 8 at addr ffff88816d9490f0 by task swapper/0/0 Cal...

kernel: wifi: mac80211: fix queue selection for mesh/OCB interfaces

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix queue selection for mesh/OCB interfaces When using iTXQ, the code assumes that there is only one vif queue for broadcast packets, using the BE queue. Allowing non-BE queue marking violates that assumption and...

PT-2023-15634 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a camera driver, where a missing bounds check can lead to a possible out of bounds write. This could result in a local denial of service, requiring System...

PT-2023-15757 · Unknown · Modem Control Device

Name of the Vulnerable Software and Affected Versions: Modem control device affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in the modem control device. This could lead to a local denial of service and requires Syst...

PT-2025-26051 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak issue has been identified in the Linux kernel, specifically in the ASoC: cros ec codec component. The problem arises from the of parse phandle function, which returns a...

PT-2025-8523 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue exists around the sysctl igmp llm reports variable in the Linux kernel. This occurs because the variable can be changed concurrently while being read, potentially...

PT-2023-13695 · Unknown · Log Service

Name of the Vulnerable Software and Affected Versions: mlog service affected versions not specified Description: The issue is related to a possible out of bounds read in the mlog service due to a missing bounds check. This could lead to local denial of service and requires System execution...

PT-2025-26014 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential memory leak has been identified in the Linux kernel, specifically in the damon reclaim init function. This issue arises when damon select ops fails, causing the allocated...

PT-2023-15626 · Unknown · Soter Service

Name of the Vulnerable Software and Affected Versions: Soter service affected versions not specified Description: The issue is related to a possible missing permission check in the soter service. This could lead to a local denial of service with no additional execution privileges. Recommendations...

PT-2025-25899 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, which fixes a wrong last sg check in sk msg recvmsg. This issue leads to a kernel NULL pointer dereference. The problem arises fr...

PT-2025-26055 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue has been resolved in the Linux kernel. The problem occurred in the RDMA/srpt module, where a patch was applied to change the LIO port members inside struct srpt...

PT-2025-25994 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference bug has been resolved in the Linux kernel. The issue occurred in the drm/ttm module, where the bo-resource value was not checked before accessing the mem typ...

PT-2025-26072 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel. The problem occurs when the dw pcie ep init function fails after initializing EPC memory and allocating the MSI memory...

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-1827)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-15373 · Unknown · Soter Service

Name of the Vulnerable Software and Affected Versions: Soter service affected versions not specified Description: The issue is related to a possible missing permission check in the soter service. This could lead to a local denial of service with no additional execution privileges. Recommendations...

PT-2025-25958 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak bug has been resolved in the Linux kernel. The issue is related to the usbhs rza1 hardware init function, where of find node by name returns a node pointer with an...

PT-2025-26050 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak issue has been identified in the Linux kernel, specifically in the ASoC: mt6797-mt6351 component. The problem arises from the of parse phandle function returning a node...