CVE Vulnerability Catalog

A bug in Linux kernel page table synchronization during vmemmap initialization was fixed. When vmemmap_can_optimize() returned true, the optimized path skipped synchronization of top-level page tables, causing intermittent kernel panics (page faults) at boot on systems with 4-level paging and large amounts of persistent memory.

A vulnerability was fixed in the Linux kernel's SLUB subsystem where set_track_prepare() could cause lock recursion. When CONFIG_DEBUG_OBJECTS_TIMERS is enabled, this function, called from hrtimer_start_range_ns while holding the per_cpu(hrtimer_bases)[n].lock, could wake up kswapd and attempt to acquire the same lock, leading to a deadlock. The fix involves passing allocation flags without __GFP_KSWAPD_RECLAIM in the debug_objects_fill_pool() case and masking out __GFP_DIRECT_RECLAIM in ___slab_alloc().

A Linux kernel vulnerability in the ocfs2 filesystem was fixed where a NULL pointer dereference could occur when releasing the journal inode after journal shutdown. The call path from ocfs2_dismount_volume() reaches jbd2_journal_release_jbd_inode() with osb->journal set to NULL.

In the Linux kernel, a NULL pointer dereference exists in cifs_strndup_to_utf16(). The function __cifs_sfu_make_node() passes NULL without checking to cifs_strndup_to_utf16(), which then passes it to cifs_local_to_utf16_bytes() where '*from' is dereferenced, causing a crash.

A vulnerability was found in Ooma Office Business Phone App up to 7.2.2 on Android. It affects an unknown part of the component com.ooma.office2. The manipulation results in improper export of android application components. The attack needs to be approached locally. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

W podatności CVE-2025-8664 występuje niewłaściwa neutralizacja danych wejściowych podczas generowania stron internetowych w systemie zarządzania e-gminą StarCities, co umożliwia ataki typu Cross-Site Scripting (XSS). Problem dotyczy wersji przed 20250825.

Podatność w systemie zarządzania dokumentami i przepływem pracy eBA firmy Bimser Solution Software Trade Inc. umożliwia obejście autoryzacji poprzez klucz kontrolowany przez użytkownika, co prowadzi do wymuszonego przeglądania.

In 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831, manipulation of the Name argument in /index.php/sysmanage/Login leads to cross-site scripting (XSS). The attack can be performed remotely and the exploit is publicly available.

In 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831, manipulation of the Name argument in /index.php causes cross-site scripting (XSS). The attack can be performed remotely and the exploit is publicly available.

A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0. Affected by this issue is some unknown functionality of the file /history/historyDownload.do;otheruserLogin.do;getfile. The manipulation of the argument fileName results in path traversal. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A weakness was identified in JeecgBoot up to 3.8.2 in an unknown function of /message/sysMessageTemplate/sendMsg, leading to improper authorization. The attack may be launched remotely, and the exploit is publicly available.

Podatność typu 'Open Redirect' w systemie zarządzania wysyłką e-maili firmy Pusula Communication Information Internet Industry and Trade Ltd. Co. umożliwia przekierowanie użytkowników do niezaufanych stron, co może prowadzić do nadużyć zaufania klientów.

The function handling BLE connection responses does not verify whether a response is expected—i.e., whether the device initiated a connection request. It relies solely on identifier matching.

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number. This enables an attacker to execute arbitrary JavaScript in the victim's browser.

In the Linux kernel, a race condition exists in the f2fs filesystem during remounting a filesystem read-write. The f2fs_remount() function resets mount options to defaults, which combined with concurrent fallocate can lead to a NULL pointer dereference and general protection fault.

W jądrze systemu Linux zidentyfikowano podatność związaną z niewłaściwą inicjalizacją pól w strukturze blkg_iostat_set podczas alokacji. Problemy te mogą prowadzić do paniki jądra z powodu dostępu do wskaźnika NULL oraz problemów w trybie debugowania.

In the Linux kernel, in the ath11k WiFi driver (mhi), the ath11k_mhi_register() function may fail to free memory allocated by mhi_alloc_controller() when ath11k_mhi_read_addr_from_dt() fails. The fix adds a call to mhi_free_controller() on error.

In the Linux kernel, in the hisilicon/qm cryptographic driver, the local 'val' buffer is only 32 bytes, while the maximum QoS configuration buffer length is 256 bytes. The sscanf function does not check the destination memory length, which may lead to a stack overflow.

A vulnerability was detected in Airsonic-Advanced up to 10.6.0 affecting unknown code of the Playlist Upload Handler component. Manipulation results in unrestricted upload.

In the Linux kernel, /proc/pid/smaps_rollup has a null-deref when the task has no VMAs. The issue was introduced by the commit converting to seq_file and occurs in show_smaps_rollup.