CVE-2022-49250 ASoC: codecs: rx-macro: fix accessing compander for aux

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rx-macro: fix accessing compander for aux AUX interpolator does not have compander, so check before accessing compander data for this. Without this checkan array of out bounds access will be made in compenabled arra...

CVE-2022-49227 igc: avoid kernel warning when changing RX ring parameters

In the Linux kernel, the following vulnerability has been resolved: igc: avoid kernel warning when changing RX ring parameters Calling ethtool changing the RX ring parameters like this: $ ethtool -G eth0 rx 1024 on igc triggers kernel warnings like this: 225.198467 ------------ cut here...

CVE-2022-49217 scsi: pm8001: Fix abort all task initialization

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix abort all task initialization In pm80xxsendabortall, the nelem field of the ccb used is not initialized to 0. This missing initialization sometimes lead to the task completion path seeing the ccb with a non-zero...

CVE-2022-49212 mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: atmel: fix refcount issue in atmelnandcontrollerinit The reference counting issue happens in several error handling paths on a refcounted object "nc-dmac". In these paths, the function simply returns the error code,...

CVE-2022-49201

CVE-2022-49201 concerns the Linux kernel, specifically the ibmvnic driver race between reset and xmit paths. The provided data describes a vulnerability where ibmvnic_xmit() may access tx_scrq after it has been freed in the reset path, caused by a race with in-flight ibmvnic_complete_tx() and a r...

CVE-2022-49186 clk: visconti: prevent array overflow in visconti_clk_register_gates()

In the Linux kernel, the following vulnerability has been resolved: clk: visconti: prevent array overflow in visconticlkregistergates This code was using -1 to represent that there was no reset function. Unfortunately, the -1 was stored in u8 so the if clksi.rsid = 0 condition was always true. Th...

CVE-2022-49155

Summary (CVE-2022-49155): The Linux kernel’s scsi/qla2xxx path (qla2xxx_create_qpair) was patched to suppress a kernel complaint arising from using smp_processor_id() in preemptible code (as seen in systemd-udevd). The connected advisories confirm the issue is addressed in the kernel and referenc...

CVE-2022-49128

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: Add missing pmruntimeputsync pmruntimegetsync will increase the rumtime PM counter even when it returns an error. Thus a pairing decrement is needed to prevent refcount leak. Fix this by replacing this API with...

CVE-2022-49107 ceph: fix memory leak in ceph_readdir when note_last_dentry returns error

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in cephreaddir when notelastdentry returns error Reset the lastreaddir at the same time, and add a comment explaining why we don't free lastreaddir when diremit returns false...

CVE-2022-49074 irqchip/gic-v3: Fix GICR_CTLR.RWP polling

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix GICRCTLR.RWP polling It turns out that our polling of RWP is totally wrong when checking for it in the redistributors, as we test the distributor bit index, whereas it is a different bit number in the RDs...

CVE-2021-47647

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: fix PCI-E clock oops Fix PCI-E clock related kernel oops that are caused by a missing clock parent. pcie0rchngclksrc has numparents set to 2 but only one parent is actually set via parenthws, it should also ha...

CVE-2025-25515

creationtimestamp| type| source ---|---|--- 2025-02-26 01:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj276a7eun2y 2025-02-26 01:44:50+00:00| seen| https://t.me/cvedetector/18934 2025-02-26 19:49:00+00:00| seen|...

CVE-2024-52925

OPSWAT MetaDefender Kiosk prior to version 4.7.0 is affected by an arbitrary code execution vulnerability via the MD Kiosk Unlock Device feature for software-encrypted USB drives. The root cause is exploitation of the unlock device functionality, enabling an attacker to execute code on the host. ...

CVE-2025-25813

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminfiles.php...

CVE-2025-27148

creationtimestamp| type| source ---|---|--- 2025-02-25 22:08:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lizusxyrb72l 2025-02-25 23:14:04+00:00| seen| https://t.me/cvedetector/18907 2025-02-25 23:48:50+00:00| seen|...

CVE-2024-45424 Zoom Workplace Apps - Business Logic Error

Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2024-12368

creationtimestamp| type| source ---|---|--- 2025-02-25 18:22:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5340 2025-02-25 19:48:45+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114066255003294911 2025-02-25 21:33:58+00:00| seen|...

CVE-2025-27000

creationtimestamp| type| source ---|---|--- 2025-02-25 17:03:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lizdqxsmnx2k 2025-02-25 17:22:46+00:00| seen| https://t.me/cvedetector/18873 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...

CVE-2025-26987

creationtimestamp| type| source ---|---|--- 2025-02-25 17:03:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lizdqxfyeh2k 2025-02-25 17:22:41+00:00| seen| https://t.me/cvedetector/18870 2025-08-22 17:25:06+00:00| seen| MISP/8e1b6542-ae86-4729-a7a6-4e9f670b8bb7...

CVE-2025-21626

GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive information from the status.php endpoint. Version 10.0.18 contains a fix for the issue. Some workarounds are available. One may delete the status.p...