CVE-2025-40303

CVE-2025-40303 affects the Linux kernel’s Btrfs: when the filesystem is in an error state, dirty metadata may be written back due to pending in-memory metadata and a stopped workqueue path. The root cause is that, if an error occurs, no new transactions are allowed and dirty folios in the btrie i...

The vulnerability of the `sndctl LedSysfs_Add()` function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, allows a hacker to cause a service failure.

The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from mishandling of errors that could result in metadata being written to the file system in the wrong state...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from mm secretmem not properly handling concurrent page errors, which could lead to reuse after release...

MGASA-2025-0321 Updated xkbcomp packages fix security vulnerabilities

Endless recursion in xkbcomp/expr.c resulting in a crash. CVE-2018-15853 NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash. CVE-2018-15859 NULL pointer dereference in ExprResolveLhs resulting in a crash. CVE-2018-15861 NULL pointer dereference in...

CVE-2025-65899

Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. The application returns different error messages for invalid users usernotfound versus valid users with incorrect passwords invalidpassword. This observable response discrepancy allows...

CVE-2025-12996

Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under certain circumstances. This issue affects CareLink Network: before December 4, 2025...

UBUNTU-CVE-2025-66287

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...

CVE-2025-40251

In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devlratenodesdestroy The function devlratenodesdestroy is documented to "Unset parent for all rate objects". However, it was only calling the driver-specific rateleafparentset or...

BIT-GOLANG-2025-61729 Excessive resource consumption when printing error string for host certificate validation in crypto/x509

Within HostnameError.Error, when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the error string is constructed by repeated string concatenation, leading to quadratic runtime. Therefore, a certificate provided by a malicious actor can...

📄 Microsoft Windows 11 Administrator Protection Bypass / Privilege Escalation

Microsoft Windows 11 suffers from an administrator protection bypass local privilege escalation vulnerability. Proof of concept Metasploit module included. =============================================================================================================================================...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from unverified user virtual address alignment, which could lead to memory access errors...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uncaught test context allocation failure that could lead to memory access errors...

The vulnerability of the pptp component in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the pptp component in the Linux operating system’s kernel is related to errors during initialization of variables. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Claude Code Command Validation Bypass Allows Arbitrary Code Execution

Due to errors in parsing shell commands related to $IFS and short CLI flags, it was possible to bypass the Claude Code read-only validation and trigger arbitrary code execution. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. Users on...

GHSA-XQ4M-MC3C-VVG3 Claude Code Command Validation Bypass Allows Arbitrary Code Execution

Due to errors in parsing shell commands related to $IFS and short CLI flags, it was possible to bypass the Claude Code read-only validation and trigger arbitrary code execution. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. Users on...

The vulnerability of the mfill_atomic() function in the mm/userfaultfd.c module of the Linux kernel’s memory management subsystem allows a attacker to cause a service failure.

The vulnerability of the mfillatomic function in the mm/userfaultfd.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __tracing_map_insert() function in the kernel/trace/tracing_map.c module, which supports Linux operating system kernel tracing, allows a hacker to cause a service failure.

The vulnerability of the tracingmapinsert function in the kernel/trace/tracingmap.c module, which supports kernel tracing in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the tcf_block_playback_offloads() function in the net/sched/cls_api.c module of the network/sched subsystem of the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the tcfblockplaybackoffloads function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information or cause service...

The vulnerability of the switch_mm_irqs_off() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the switchmmirqsoff function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...