CVE-2023-53140

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Remove the /proc/scsi/$procname directory earlier Remove the /proc/scsi/$procname directory earlier to fix a race condition between unloading and reloading kernel modules. This fixes a bug introduced in 2009 by commit...

CVE-2023-53090

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of the waiter structure is not initialized; When copyfromuser fails in...

CVE-2023-53144

In the Linux kernel, the following vulnerability has been resolved: erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms As the call trace shown, the root cause is kunmap incorrect pages: BUG: kernel NULL pointer dereference, address: 00000000 CPU: 1 PID: 40 Comm: kworker/u5:0 Not tainted...

CVE-2023-53113

The CVE-2023-53113 entry concerns the Linux kernel wifi NL80211 offchannel check. A NULL-pointer dereference could occur when a link was created by userspace in AP mode but not activated yet, resulting in a chandef that is invalid or has no channel. The vulnerability arises from dereferencing thi...

BELL-CVE-2025-23140

Bulletin has no description...

CVE-2022-49824

In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatlinkadd In atatlinkadd, the return value of transportadddevice is not checked. As a result, it causes null-ptr-deref while removing the module, because transportremovedevice is...

CVE-2025-4181

creationtimestamp| type| source ---|---|--- 2025-05-01 23:17:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14414 2025-05-02 01:01:03+00:00| published-proof-of-concept| Telegram/s-kIMYmG13LAuUrJwQqvRFYWuxieFSgDiDriSHG9LRW4et4 2025-05-02 02:01:22+00:00| seen|...

CVE-2025-46628

creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cpp7q6w2r 2025-05-01 23:12:39+00:00| seen| https://t.me/cvedetector/24271...

CVE-2022-49793

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix possible memory leak in iiosysfstriginit devsetname allocates memory for name, it need be freed when deviceadd fails, call putdevice to give up the reference that hold in deviceinitialize, so that it can ...

CVE-2022-49790

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting uninitialized value at iforceinitdevice 1, for commit 6ac0aec6b0a6 "Input: iforce - allow callers supply data buffer when fetching device IDs"...

CVE-2022-49863

In the Linux kernel, the following vulnerability has been resolved: can: afcan: fix NULL pointer dereference in canrxregister It causes NULL pointer dereference when testing as following: a use syscallNRsocket, 0x10ul, 3ul, 0 to create netlink socket. b use syscallNRsendmsg, ... to create bond li...

CVE-2022-49842

In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Fix use-after-free in sndsocexit KASAN reports a use-after-free: BUG: KASAN: use-after-free in devicedel+0xb5b/0xc60 Read of size 8 at addr ffff888008655050 by task rmmod/387 CPU: 2 PID: 387 Comm: rmmod Hardware name:...

CVE-2025-37752

creationtimestamp| type| source ---|---|--- 2025-05-01 13:55:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo4hlskxbf2e 2025-05-01 16:30:24+00:00| seen| https://t.me/cvedetector/24225 2025-05-07 04:55:30+00:00| seen|...

CVE-2025-32444 vLLM Vulnerable to Remote Code Execution via Mooncake Integration

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.6.5 and prior to 0.8.5, having vLLM integration with mooncake, are vulnerable to remote code execution due to using pickle based serialization over unsecured ZeroMQ sockets. The vulnerab...

CVE-2025-29906

CVE-2025-29906 affects Finit, a fast init for Linux. Versions 3.0-rc1 up to and including 4.10 bundle a getty implementation for the tty directive that can bypass /bin/login, allowing login without authentication. The issue is fixed in version 4.11. Affected users should upgrade to 4.11 or later;...

CVE-2025-4085

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges...

BELL-CVE-2025-46646

Bulletin has no description...

CVE-2025-4006

creationtimestamp| type| source ---|---|--- 2025-04-28 07:11:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13660 2025-04-28 09:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxjozy62t 2025-04-28 11:33:10+00:00| seen|...

CVE-2025-46687

quickjs-ng through 0.9.0 has a missing length check in JSReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...

CVE-2025-3963

creationtimestamp| type| source ---|---|--- 2025-04-27 08:08:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13610 2025-04-27 11:00:23+00:00| published-proof-of-concept| Telegram/qrKWhm8whHjICEcAcloeQt693u4tcg5QaKKhObyZNnfq3l4 2025-04-27 11:34:51+00:00| seen|...