CVE-2022-49853

In the Linux kernel, the following vulnerability has been resolved: net: macvlan: fix memory leaks of macvlancommonnewlink kmemleak reports memory leaks in macvlancommonnewlink, as follows: ip link add link eth0 name .. type macvlan mode source macaddr add kmemleak reports: unreferenced object...

CVE-2022-49790

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting uninitialized value at iforceinitdevice 1, for commit 6ac0aec6b0a6 "Input: iforce - allow callers supply data buffer when fetching device IDs"...

CVE-2022-49883

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format On 64 bit host, if the guest doesn't have X86FEATURELM, KVM will access 16 gprs to 32-bit smram image, causing out-ouf-bound ram access. On 32 bit host,...

CVE-2022-49878

In the Linux kernel, the following vulnerability has been resolved: bpf, verifier: Fix memory leak in array reallocation for stack state If an error NULL is returned by krealloc, callers of reallocarray were setting their allocation pointers to NULL, but on error krealloc does not touch the...

CVE-2022-49863

In the Linux kernel, the following vulnerability has been resolved: can: afcan: fix NULL pointer dereference in canrxregister It causes NULL pointer dereference when testing as following: a use syscallNRsocket, 0x10ul, 3ul, 0 to create netlink socket. b use syscallNRsendmsg, ... to create bond li...

CVE-2022-49840

In the Linux kernel, the following vulnerability has been resolved: bpf, testrun: Fix alignment problem in bpfprogtestrunskb We got a syzkaller problem because of aarch64 alignment fault if KFENCE enabled. When the size from user bpf program is an odd number, like 399, 407, etc, it will cause the...

CVE-2022-49829

In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: fix fence ref counting We leaked dependency fences when processes were beeing killed. Additional to that grab a reference to the last scheduled fence...

CVE-2025-3510

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14436 2025-05-02 07:34:41+00:00| seen| https://t.me/cvedetector/24316 2025-05-02 08:00:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7qccvf2h...

CVE-2025-37763

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: take paired job reference For paired jobs, have the fragment job take a reference on the geometry job, so that the geometry job cannot be freed until the fragment job has finished with it. The geometry job...

CVE-2025-23161

In the Linux kernel, the following vulnerability has been resolved: PCI: vmd: Make vmddev::cfglock a rawspinlockt type The access to the PCI config space via pciops::read and pciops::write is a low-level hardware access. The functions can be accessed with disabled interrupts even on PREEMPTRT. Th...

CVE-2022-49923

In the Linux kernel, the following vulnerability has been resolved: nfc: nxp-nci: Fix potential memory leak in nxpncisend nxpncisend will call nxpncii2cwrite, and only free skb when nxpncii2cwrite failed. However, even if the nxpncii2cwrite run succeeds, the skb will not be freed in nxpncii2cwrit...

CVE-2022-49922

In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix potential memory leak in nfcmrvli2cncisend nfcmrvli2cncisend will be called by nfcmrvlncisend, and skb should be freed in nfcmrvli2cncisend. However, nfcmrvlncisend will only free skb when i2cmastersend return =...

CVE-2022-49913

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix inode list leak during backref walking at findparentnodes During backref walking, at findparentnodes, if we are dealing with a data extent and we get an error while resolving the indirect backrefs, at...

CVE-2022-49882

In the Linux kernel, the following vulnerability has been resolved: KVM: Reject attempts to consume or refresh inactive gfntopfncache Reject kvmgpccheck and kvmgpcrefresh if the cache is inactive. Not checking the active flag during refresh is particularly egregious, as KVM can end up with a vali...

CVE-2022-49870

In the Linux kernel, the following vulnerability has been resolved: capabilities: fix undefined behavior in bit shift for CAPTOMASK Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below: UBSAN: shift-out-of-bounds in...

CVE-2025-4180

creationtimestamp| type| source ---|---|--- 2025-05-01 22:21:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14407 2025-05-02 01:01:03+00:00| published-proof-of-concept| Telegram/s-kIMYmG13LAuUrJwQqvRFYWuxieFSgDiDriSHG9LRW4et4 2025-05-02 02:01:15+00:00| seen|...

WordPress WPML Multilingual CMS plugin 3.6.0-4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpml_language_switcher Shortcode

Authenticated Contributor+ Stored Cross-Site Scripting via wpmllanguageswitcher Shortcode vulnerability discovered by stealthcopter in WordPress Plugin Multilingual CMS versions 3.6.0-4.7.3...

CVE-2025-46629

creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cppjzcs2o 2025-05-01 23:12:39+00:00| seen| https://t.me/cvedetector/24272...

CVE-2025-46633

creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cppd7hh2h 2025-05-01 23:12:31+00:00| seen| https://t.me/cvedetector/24265 2025-05-02 15:16:59+00:00| published-proof-of-concept|...

CVE-2025-27365

CVE-2025-27365 affects IBM MQ Operator LTS 2.0.0–2.0.29, MQ Operator CD 3.0.0–3.1.3, 3.3.0–3.5.1, and MQ Operator SC2 3.2.0–3.2.10. Description: a client connecting to an IBM MQ Queue Manager may trigger a SIGSEGV in the AMQRMPPA channel process, terminating it. CVSS v3.1 base score reported as 6...