23105 matches found
bluetooth/l2cap: sync sock recv cb and release
...
io_uring/tctx: work around xa_store() allocation error issue
...
f2fs: fix to drop all discards after creating snapshot on lvm device
...
mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable()
...
net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()
...
media: mediatek: vcodec: Only free buffer VA that is not NULL
...
Redis is vulnerable to DoS via specially crafted LUA scripts
...
Redis: Authenticated users can execute LUA scripts as a different user
...
Lua library commands may lead to integer overflow and potential RCE
...
wifi: mac80211: increase scan_ies_len for S1G
...
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
...
ZIP64 End of Central Directory (EOCD) Locator record offset not checked
...
iommu/s390: Make attach succeed when the device was surprise removed
...
bpf: Call free_htab_elem() after htab_unlock_bucket()
...
erofs: handle NONHEAD !delta[1] lclusters gracefully
...
f2fs: fix to account dirty data in __get_secs_required()
...
KVM: arm64: Don't retire aborted MMIO instruction
...
KVM: arm64: Get rid of userspace_irqchip_in_use
...
Chromium: CVE-2025-11460 Use after free in Storage
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-11458 Heap buffer overflow in Sync
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability...
Azure PlayFab Elevation of Privilege Vulnerability
...
Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...
Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to perform information disclosure locally...
Azure Monitor Log Analytics Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an unauthorized attacker to perform spoofing over a network...
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability...
Redis Enterprise Elevation of Privilege Vulnerability
...
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)
...
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
...
Redis Lua Use-After-Free may lead to remote code execution
...
octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
...
net/smc: initialize close_work early to avoid warning
...
KVM: arm64: Disassociate vcpus from redistributor region on teardown
...
tty: add the option to have a tty reject a new ldisc
...
SUNRPC: lock against ->sock changing during sysfs read
...
Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG
...
Qemu-kvm: vnc websocket handshake use-after-free
...
Uncontrolled recursion in Qt SVG module
...
mm: /proc/pid/smaps_rollup: fix no vma's null-deref
...
net/mlx5e: Harden uplink netdev access against device unbind
...
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
...
cgroup: split cgroup_destroy_wq into 3 workqueues
...
cnic: Fix use-after-free bugs in cnic_delete_task
...
qed: Don't collect too many protection override GRC elements
...
net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
...
tls: make sure to abort the stream if headers are bogus
...
ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
...