CVE-2022-49769

In the Linux kernel, the following vulnerability has been resolved: gfs2: Check sbbsizeshift after reading superblock Fuzzers like to scribble over sbbsizeshift but in reality it's very unlikely that this field would be corrupted on its own. Nevertheless it should be checked to avoid the...

CVE-2025-37792

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Prevent potential NULL dereference The btrtlinitialize function checks that rtlloadfile either had an error or it loaded a zero length file. However, if it loaded a zero length file then the error code is not se...

CVE-2022-49835

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: fix potential memleak in 'addwidgetnode' As 'kobjectadd' may allocated memory for 'kobject-name' when return error. And in this function, if call 'kobjectadd' failed didn't free kobject. So call 'kobjectput' to recycli...

CVE-2022-49825

In the Linux kernel, the following vulnerability has been resolved: ata: libata-transport: fix error handling in atatportadd In atatportadd, the return value of transportadddevice is not checked. As a result, it causes null-ptr-deref while removing the module, because transportremovedevice is...

CVE-2025-23146

In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer dereference The offgpios could be NULL. Add missing check in the kb3930probe. This is similar to the issue fixed in commit b1ba8bcb2d1f "backlight: hx8357: Fix potential NULL pointer...

CVE-2022-49889

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check for NULL cpubuffer in ringbufferwakewaiters On some machines the number of listed CPUs may be bigger than the actual CPUs that exist. The tracing subsystem allocates a percpu directory with access to the per CP...

CVE-2025-3707

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14441 2025-05-02 07:34:35+00:00| seen| https://t.me/cvedetector/24312 2025-05-02 08:00:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7oog5g22...

CVE-2024-13418

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14430 2025-05-02 07:19:05+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lo6bacjbbkf2 2025-05-02...

CVE-2025-37790

In the Linux kernel, the following vulnerability has been resolved: net: mctp: Set SOCKRCUFREE Bind lookup runs under RCU, so ensure that a socket doesn't go away in the middle of a lookup...

CVE-2025-37763

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: take paired job reference For paired jobs, have the fragment job take a reference on the geometry job, so that the geometry job cannot be freed until the fragment job has finished with it. The geometry job...

CVE-2025-4179

creationtimestamp| type| source ---|---|--- 2025-05-02 02:35:20+00:00| seen| https://bsky.app/profile/potato.software/post/3lo5s27p4sp25 2025-05-02 05:01:09+00:00| seen| Telegram/7QEqju-jYCJkVqvbZMxXpX4ajzaYKxifFuPEzR6oDsSpQMc 2025-05-02 06:07:35+00:00| seen|...

CVE-2025-4195

creationtimestamp| type| source ---|---|--- 2025-05-02 02:01:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5q5cebz42p 2025-05-02 04:00:32+00:00| seen| Telegram/4CEzVkw1tG4HD1iiiLPoQtEQrPN6Dnm8Nbv3J3XJF9xb4 2025-05-02 05:04:12+00:00| exploited| https://t.me/cvedetector/24308...

CVE-2024-55910

creationtimestamp| type| source ---|---|--- 2025-05-02 02:01:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5q5b4t2y2o 2025-05-02 05:04:12+00:00| seen| https://t.me/cvedetector/24309 2025-05-02 13:15:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14483 2025-05-02...

Ubuntu: Security Advisory (USN-7473-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-J342-M5HW-RR3V

creationtimestamp| type| source ---|---|--- 2025-05-01 23:25:44+00:00| seen| https://gist.github.com/EliahKagan/c847476c5a1c15dac03b1ce9a010d2a1...

CVE-2025-3517

creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cptqdii2l 2025-05-01 23:12:51+00:00| seen| https://t.me/cvedetector/24280 2025-05-02 13:15:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14482 2025-05-02...

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to a Race Condition vulnerability in Apache Tomcat [CVE-2024-56337]

Summary IBM Watson Speech Services Cartridge is vulnerable to a Race Condition vulnerability in Apache Tomcat, due to a case insensitive file system, caused by improper default installation settings CVE-2024-56337. Apache Tomcat is used in our Speech microservices. This vulnerabilitiy has been...

CVE-2022-38121

creationtimestamp| type| source ---|---|--- 2025-05-01 19:14:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14366 2025-05-15 05:30:47+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/upsmontraversal.rb 2025-05-15 21:02:28+00:00| seen|...

CVE-2025-46565

CVE-2025-46565 (Vite) affects Vite < 6.3.4, < 6.2.7, < 6.1.6, < 5.4.19, and

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to arbitrary code execution in FreeType [CVE-2025-27363]

Summary IBM Watson Speech Services Cartridge is vulnerable to arbitrary code execution in C, due to an out of bounds write that assigns incorrect values causing under-allocation to a heap buffer. CVE-2025-27363. Free Type is used in our Base OS images. This vulnerabilitiy has been addressed. Plea...