1053 matches found
CVE-2022-21546
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix WRITESAME No Data Buffer crash In newer version of the SBC specs, we have a NDOB bit that indicates there is no data buffer that gets written out. If this bit is set using commands like "sgwritesame --ndob" we...
CVE-2023-53140
In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/$procname directory earlier Remove the /proc/scsi/$procname directory earlier to fix a race condition between unloading and reloading kernel modules. This fixes a bug introduced in 2009 by commit...
CVE-2023-53090
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of the waiter structure is not initialized; When copyfromuser fails in...
CVE-2023-53144
In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the root cause is kunmap incorrect pages: BUG: kernel NULL pointer dereference, address: 00000000 CPU: 1 PID: 40 Comm: kworker/u5:0 Not tainted...
CVE-2023-53113
The CVE-2023-53113 entry concerns the Linux kernel wifi NL80211 offchannel check. A NULL-pointer dereference could occur when a link was created by userspace in AP mode but not activated yet, resulting in a chandef that is invalid or has no channel. The vulnerability arises from dereferencing thi...
BELL-CVE-2025-23140
Bulletin has no description...
CVE-2022-49824
In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatlinkadd In atatlinkadd, the return value of transportadddevice is not checked. As a result, it causes null-ptr-deref while removing the module, because transportremovedevice is...
CVE-2025-4181
creationtimestamp| type| source ---|---|--- 2025-05-01 23:17:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14414 2025-05-02 01:01:03+00:00| published-proof-of-concept| Telegram/s-kIMYmG13LAuUrJwQqvRFYWuxieFSgDiDriSHG9LRW4et4 2025-05-02 02:01:22+00:00| seen|...
CVE-2025-46628
creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cpp7q6w2r 2025-05-01 23:12:39+00:00| seen| https://t.me/cvedetector/24271...
CVE-2022-49842
In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Fix use-after-free in sndsocexit KASAN reports a use-after-free: BUG: KASAN: use-after-free in devicedel+0xb5b/0xc60 Read of size 8 at addr ffff888008655050 by task rmmod/387 CPU: 2 PID: 387 Comm: rmmod Hardware name:...
CVE-2022-49793
In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit devsetname allocates memory for name, it need be freed when deviceadd fails, call putdevice to give up the reference that hold in deviceinitialize, so that it can ...
CVE-2022-49790
In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting uninitialized value at iforceinitdevice 1, for commit 6ac0aec6b0a6 "Input: iforce - allow callers supply data buffer when fetching device IDs"...
CVE-2022-49863
In the Linux kernel, the following vulnerability has been resolved: can: afcan: fix NULL pointer dereference in canrxregister It causes NULL pointer dereference when testing as following: a use syscallNRsocket, 0x10ul, 3ul, 0 to create netlink socket. b use syscallNRsendmsg, ... to create bond li...
CVE-2025-37752
creationtimestamp| type| source ---|---|--- 2025-05-01 13:55:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo4hlskxbf2e 2025-05-01 16:30:24+00:00| seen| https://t.me/cvedetector/24225 2025-05-07 04:55:30+00:00| seen|...
CVE-2025-32444 vLLM Vulnerable to Remote Code Execution via Mooncake Integration
vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.6.5 and prior to 0.8.5, having vLLM integration with mooncake, are vulnerable to remote code execution due to using pickle based serialization over unsecured ZeroMQ sockets. The vulnerab...
CVE-2025-29906
CVE-2025-29906 affects Finit, a fast init for Linux. Versions 3.0-rc1 up to and including 4.10 bundle a getty implementation for the tty directive that can bypass /bin/login, allowing login without authentication. The issue is fixed in version 4.11. Affected users should upgrade to 4.11 or later;...
CVE-2025-4085
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges...
BELL-CVE-2025-46646
Bulletin has no description...
CVE-2025-4006
creationtimestamp| type| source ---|---|--- 2025-04-28 07:11:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13660 2025-04-28 09:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxjozy62t 2025-04-28 11:33:10+00:00| seen|...