Multiple security vulnerabilities were discovered in the Linux kernel affecting subsystems such as Netfilter and network traffic control. These flaws could potentially allow an attacker to compromise affected systems. The issues have been addressed in updated Linux kernel packages for various Ubuntu releases and flavors, including linux-gcp-6.11. Users must apply the updates and reboot their systems. Due to ABI changes, recompilation of third-party kernel modules may be necessary.
Multiple security vulnerabilities were discovered in the Linux kernel, specifically affecting the linux-raspi-realtime and linux-realtime kernels. These flaws impact subsystems including InfiniBand drivers, Netfilter, and network traffic control. An attacker could potentially exploit these issues to compromise the system. Fixes have been released in updated kernel versions, and users are advised to update and reboot their systems. Due to an ABI change, recompilation of third-party kernel modules is required after the update.
Multiple security vulnerabilities were discovered in the Linux kernel affecting a wide range of subsystems and architectures. These flaws could potentially allow an attacker to compromise the system. The issues impact numerous components including architectures (ARM64, PowerPC, x86), drivers (network, USB, Bluetooth, GPU, etc.), filesystems, networking protocols, security modules, and more. A patch addressing these vulnerabilities is available and included in Linux kernel version 6.11.0-1014.15~24.04.1 for the linux-lowlatency-hwe-6.11 package.
A vulnerability in cifs-utils was discovered where it incorrectly handled namespaces when obtaining Kerberos credentials. This flaw could allow an attacker to obtain sensitive information. The issue affects multiple Ubuntu releases and has been addressed in updated package versions. Users are advised to update to the fixed versions to mitigate the risk.
CVE-2025-2241 is a vulnerability in Hive, a component of Multicluster Engine (MCE) and Advanced Cluster Management (ACM), where VCenter credentials are exposed in the ClusterProvision object after provisioning a VSphere cluster. Users with read access to ClusterProvision objects can extract these sensitive credentials even without direct access to Kubernetes Secrets. This exposure can lead to unauthorized VCenter access, cluster management, and privilege escalation.
CVE-2025-27111 is a vulnerability in the Rack middleware component Rack::Sendfile that allows an attacker to inject escape sequences, such as newline characters, into the X-Sendfile-Type header. This leads to log injection, which can distort log files and hinder security auditing and incident investigation. The issue affects multiple Rack versions prior to 2.2.12, and versions 3.0 up to but not including 3.0.13, as well as 3.1 up to but not including 3.1.11. The vulnerability has a medium severity rating with a CVSS score of 6.9. A fix is available in Rack versions 2.2.12, 3.0.13, and 3.1.11. Mitigation involves updating to these fixed versions or removing the use of Rack::Sendfile.
TCPDF versions prior to 6.8.0 contain a vulnerability where the Error function does not properly escape characters in error messages, leading to potential cross-site scripting (XSS) issues. This flaw was fixed in version 6.8.0.
A vulnerability in tc-lib-pdf-font before version 2.6.4 causes mishandling of fonts, specifically misparsing the FontBBox for Type 1 and TrueType fonts. This affects TCPDF before 6.8.0 and other products using this library.
CVE-2024-55565 is a vulnerability in the nanoid library where passing fractional (non-integer) values to the nanoid function causes various undesirable behaviors. In browser environments, this can lead to an infinite loop. In Node.js, fractional values cause the internal poolOffset to become fractional, resulting in nanoid returning zeroes until the pool is refilled. Additionally, if the first call in Node.js uses a fractional argument, buffer allocation fails with an error. Versions 3.3.8 and 5.0.9 contain fixes for these issues.
Tornado versions prior to 6.4.2 contain a denial-of-service vulnerability due to an inefficient HTTP cookie parsing algorithm. The parsing algorithm can exhibit quadratic time complexity when processing specially crafted cookie headers, causing excessive CPU usage. This occurs in the event loop thread, potentially blocking other requests and degrading service availability. A fix is available in Tornado version 6.4.2.
CVE-2024-4741 is a use-after-free vulnerability in OpenSSL affecting specific versions including 3.3.0, 3.2.0, 3.1.0, 3.0.0, and 1.1.1. The flaw occurs when the SSL_free_buffers function is called while the internal buffer is still in use, potentially leading to memory corruption, crashes, or arbitrary code execution. This function is rarely used by applications, and the FIPS modules are not affected. No active exploitation is known.
matrix-js-sdk versions before 34.11.1 contain a client-side path traversal vulnerability via crafted MXC URIs. This flaw allows a malicious room member to cause clients using the SDK to send arbitrary authenticated GET requests to the client's homeserver. The vulnerability arises because the SDK does not validate the server-name and media-id components of MXC URIs on the client side, contrary to the Matrix specification's security considerations. The issue is fixed in version 34.11.1.
XStream versions prior to 1.4.21 are vulnerable to a denial of service (DoS) attack caused by a stack overflow when processing manipulated input streams using the BinaryStreamDriver. This vulnerability allows a remote attacker to crash the application by triggering a stack overflow error. The issue is fixed in version 1.4.21, which detects the manipulation and raises an InputManipulationException instead of crashing. Until patched, the only workaround is to catch the StackOverflowError in client code using the BinaryStreamDriver configuration.
CVE-2024-9902 is a vulnerability in the ansible-core user module that allows an unprivileged user to create or replace any file on the system path and take ownership when a privileged user runs the user module against the unprivileged user's home directory. This occurs if the unprivileged user has traversal permissions on the directory containing the target file, enabling them to control the file contents as its owner.
CVE-2024-45614 is a vulnerability in Puma's header normalization that allows clients to override headers set by intermediate proxies by using underscore variants of header names. This can affect users who trust proxy-set headers, potentially enabling attackers to downgrade connections to HTTP or redirect responses, risking confidentiality if combined with a MITM attack. Fixed versions 5.6.9 and 6.4.3 discard underscore headers when the non-underscore version exists. Users relying on proxy headers for security should upgrade immediately or configure proxies like Nginx to discard underscore headers.
CVE-2024-8504 is an OS command injection vulnerability in VICIdial version 2.14-917a. An authenticated user with agent-level access can execute arbitrary shell commands as the root user. This vulnerability can be combined with CVE-2024-8503 to allow unauthenticated attackers to achieve root command execution.
CVE-2024-8503 is a critical SQL injection vulnerability in VICIdial version 2.14-917a that allows unauthenticated attackers to perform time-based SQL injection to enumerate database records. VICIdial stores plaintext credentials by default, increasing the risk of credential exposure. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability.
CVE-2024-45063 is a critical Use-After-Free vulnerability in FreeBSD affecting versions 13.3-RELEASE, 14.0-RELEASE, and 14.1-RELEASE. It arises from incorrect flag handling in the ctl_write_buffer function, leading to kernel memory corruption. Exploitation can occur via malicious software running in a guest VM exposing virtio_scsi, potentially allowing code execution on the host's bhyve userspace process, which runs with root privileges but within a Capsicum sandbox. Additionally, a malicious iSCSI initiator could achieve remote code execution on the iSCSI target host. The vulnerability has a CVSS 3.1 score of 9.8, indicating critical severity.