CVE-2025-4574

CVE-2025-4574 affects IBM Edge Data Collector.根 In the crossbeam-channel Rust crate, the Channel type’s Drop method has a race condition that can lead to a double-free and memory corruption (CVSS 6.5). Affected IBM Edge Data Collector versions: 9.0, 8.11, 9.1. Remediations are available: upgrade ...

CVE-2025-4574 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

CVE-2025-4574 Crossbeam-channel: crossbeam-channel vulnerable to double free on drop

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

CVE-2022-3279

creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16166...

CVE-2022-3067

creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16160...

CVE-2022-3060

creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16157...

CVE-2021-3305

creationtimestamp| type| source ---|---|--- 2025-05-13 15:31:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16154...

crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

A flaw was found in the Golang crypto/internal/nistec package. Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Considering how this function is used, this leaka...

gstreamer1-plugins-base: GStreamer has an OOB-read in format_channel_mask

A flaw was found in the GStreamer library. An out-of-bounds read in the gst-discoverer-1.0 command line tool can cause crashes for certain input files, potentially allowing a malicious third party to trigger an application crash. This issue only affects the gst-discoverer-1.0 command line tool an...

kernel: wifi: cfg80211: clear link ID from bitmap during link delete after clean up

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear link ID from bitmap during link delete after clean up Currently, during link deletion, the link ID is first removed from the validlinks bitmap before performing any clean-up operations. However, some functio...

kernel: wifi: cfg80211: Set correct chandef when starting CAC

A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. A local user could trigger a system crash, leading to a Denial of Service DoS, due to an incorrect channel definition during the Channel Availability Check CAC startup when operating in a mode other than Access Point AP mode. This...

kernel: ppp: do not assume bh is held in ppp_channel_bridge_input()

In the Linux kernel, the following vulnerability has been resolved: ppp: do not assume bh is held in pppchannelbridgeinput Networking receive path is usually handled from BH handler. However, some protocols need to acquire the socket lock, and packets might be stored in the socket backlog is the...

kernel: icmp: change the order of rate limits

A flaw was found in the Linux kernel related to the order of rate limits for ICMP messages. The sequence in which rate limiters are applied potentially allows a side-channel attack, resulting in information disclosure...

kernel: bluetooth/l2cap: sync sock recv cb and release

In the Linux kernel, the following vulnerability has been resolved: bluetooth/l2cap: sync sock recv cb and release The problem occurs between the system call to close the sock and hcirxwork, where the former releases the sock and the latter accesses it without lock protection. CPU0 CPU1 ---- ----...

kernel: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number

A flaw was found in the drm/amdgpu component of the Linux kernel. An improper range check of the fbchannelnumber could allow a local attacker to perform an out-of-bounds read. This could lead to information disclosure or a denial of service DoS...

Crossbeam 资源管理错误漏洞

Crossbeam is a Crossbeam open source tool for concurrent programming applications. A resource management error vulnerability exists in Crossbeam that stems from a contention condition in the Drop method of the Channel type, which could lead to a double release and memory corruption...

The vulnerability of the Deepin operating system’s dde-api-proxy component allows a hacker to gain root privileges.

The vulnerability of the dde-api-proxy component in the Deepin operating system is related to insufficient verification of the source of the communication channel. Exploiting this vulnerability can allow an attacker to gain root privileges...

CVE-2025-4574: Double Free

In crossbeam-channel rust crate, the internal Channel type's Drop method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1532)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2025-1533)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...