CVEs

pipewire: RAOP RTSP NULL Deref

pipewire: Pulse Server alloca Stack Overflow

kernel: debugobjects: Don't call fill_pool() in early boot hardirq context

kernel: debugobjects: Do not fill_pool() if pi_blocked_on

kernel: sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task()

kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve()

kernel: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()

kernel: slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock

kernel: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd

kernel: mm/mincore: handle non-swap entries before !CONFIG_SWAP guard

kernel: mm/damon/reclaim: handle ctx allocation failure

kernel: mm/damon/lru_sort: handle ctx allocation failure

kernel: nvmem: layouts: onie-tlv: fix hang on unknown types

kernel: net: bonding: fix NULL pointer dereference in bond_do_ioctl()

kernel: net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues()

kernel: i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()

kernel: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM

kernel: fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()

kernel: arm64: mm: call pagetable dtor when freeing hot-removed page tables

kernel: ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow

kernel: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init

kernel: KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying

kernel: drm/virtio: Fix driver removal with disabled KMS

kernel: ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions

kernel: netfilter: nf_conntrack: destroy stale expectfn expectations on unregister

kernel: ASoC: wm_adsp: Fix NULL dereference when removing firmware controls

kernel: riscv/ptrace: Use USER_REGSET_NOTE_TYPE for REGSET_CFI

kernel: signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()

kernel: hsr: Remove WARN_ONCE() in hsr_addr_is_self()

kernel: arm64: errata: Mitigate TLBI errata on various Arm CPUs

kernel: net: rds: clear i_sends on setup unwind

kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset

electron-updater: app-builder-lib: Electron-updater: Arbitrary code execution through AppImage library loading vulnerability

electron-updater: electron-builder: Electron-updater: Information disclosure via unstripped credential headers during HTTP redirects

github.com/seaweedfs/seaweedfs: SeaweedFS: Information disclosure via unvalidated JSONP callback parameter

postgresql_anonymizer: PostgreSQL Anonymizer: Information Disclosure via brute-force attack on hash function

fzf: fzf: Denial of Service via inefficient HTTP body processing

github.com/junegunn/fzf: fzf: Denial of Service via Integer Overflow in FuzzyMatchV2 function

keycloak-broker: Keycloak: Privilege escalation to realm administrator via improper authorization in identity provider mapper

keycloak-admin-ui: keycloak-admin-ui: Keycloak: Admin UI extension brute-force-user endpoint bypasses FGAPv2 user view restrictions

org.apache.activemq/activemq-broker: org.apache.activemq/activemq-core: org.apache.activemq/activemq-all: Apache ActiveMQ: Unauthorized broker instantiation via improper input validation in LDAP entries

org.apache.activemq/activemq: org.apache.activemq/activemq-all: org.apache.activemq/activemq-stomp: Apache ActiveMQ: Denial of Service via improper input validation in STOMP connector

Apache ActiveMQ Client: Apache ActiveMQ: Apache ActiveMQ All: Apache ActiveMQ: Denial of Service via crafted WireFormatInfo frame

activemq: Apache ActiveMQ: Denial of Service via repeated BrokerInfo commands

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

activemq: activemq-all: activemq-client: activemq-broker: Apache ActiveMQ: Denial of Service via crafted OpenWire Message

org.apache.activemq/activemq-broker: org.apache.activemq/activemq-all: org.apache.activemq/activemq: Apache ActiveMQ: Information disclosure due to broken temporary destination isolation

A weakness has been identified in GPAC up to 26.02.0. This affects an unknown part of the file src/utils/base_encoding.c of the component ISOBMFF Parser. Executing a manipulation can lead to highly compressed data. The attack needs to be launched locally. The exploit has been…

rtapi_app in linuxcnc-uspace in LinuxCNC before 2.9.9 allows privilege escalation. It is installed SUID root and loads shared library modules via dlopen() by using a user-supplied module name. Insufficient validation of the module name allows path traversal, enabling an…

A flaw was found in Yelp due to an overly permissive Content Security Policy (CSP) implementation provided by yelp-xsl. A malicious Flatpak application can open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG…