CVE-2025-71072

A flaw was found in the Linux kernel's shmem tmpfs filesystem rename operation. Under severe memory pressure, the mapletree insertion used during file rename can fail, and the error recovery path does not properly handle this failure. This can leave the filesystem directory offset tree in an...

CVE-2025-68793

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix a job-pasid access race in gpu recovery Avoid a possible UAF in GPU recovery due to a race between the sched timeout callback and the tdr work queue. The gpu recovery function calls drmschedstop and later...

CVE-2025-70893

A time-based blind SQL Injection vulnerability exists in PHPGurukul Cyber Cafe Management System v1.0 within the adminprofile.php endpoint. The application fails to properly sanitize user-supplied input provided via the adminname parameter, allowing authenticated attackers to inject arbitrary SQL...

CVE-2025-71143

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 "clk: Annotate struct clkhwonecelldata with countedby" annotated the hws member of 'struct clkhwonecelldata' with countedby, which informs the...

CVE-2025-71111

A Time-of-Check to Time-of-Use TOCTOU race condition vulnerability was found in the Linux kernel's w83791d hardware monitoring driver. The FANFROMREG macro evaluates its arguments multiple times, and when used in lockless contexts with shared driver data, a race condition can cause the divisor...

CVE-2025-71138

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pingpong interface It is checked almost always in dpuencoderphyswbsetupctl, but in a single place the check is missing. Also use convenient locals instead of physenc- where availabl...

CVE-2025-71117

A flaw was found in the Linux kernel. A local user could exploit a vulnerability where freezing the request queue within certain sysfs store callbacks can lead to a deadlock. This issue may occur when combined with the device-mapper multipath dm-multipath driver and the queueifnopath option, or...

CVE-2025-71105

In the Linux kernel, the following vulnerability has been resolved: f2fs: use global inlinexattrslab instead of per-sb slab cache As Hong Yun reported in mailing list: loop7: detected capacity change from 0 to 131072 ------------ cut here ------------ kmemcache of name 'f2fsxattrentry-7:7' alread...

CVE-2025-71103

In the Linux kernel, the following vulnerability has been resolved: drm/msm: adreno: fix deferencing ifpcreglist when not declared On plaforms with an a7xx GPU not supporting IFPC, the ifpcreglist if still deferenced in a7xxpatchpwrupreglist which causes a kernel crash: Unable to handle kernel NU...

CVE-2025-71132

A locking context bug was found in the Linux kernel's smc91x Ethernet driver on PREEMPTRT kernels. The smcspecialtrylock function disables IRQs but smcspecialunlock does not properly restore IRQs on PREEMPTRT. This mismatch causes RCU read unlock to fail in devqueuexmit, triggering a "workqueue...

CVE-2025-71116

In the Linux kernel, the following vulnerability has been resolved: libceph: make decodepool more resilient against corrupted osdmaps If the osdmap is maliciously corrupted such that the encoded length of cephpgpool envelope is less than what is expected for a particular encoding version,...

CVE-2025-71126

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. A remote attacker could exploit this vulnerability when the packet scheduler attempts to reinject packets after receiving an MPFAIL message but before the infinite map has been fully transmitted. This timing issue can lead...

CVE-2025-71108

A firmware compatibility issue was found in the Linux kernel's USB Type-C UCSI driver. The UCSI specification defines numconnectors as a 7-bit field with the 8th bit reserved. Some buggy firmware incorrectly sets this reserved bit, causing the driver to interpret an invalid connector count. This...

DEBIAN-CVE-2025-71122

In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Check for overflow in IOMMUTESTOPADDRESERVED syzkaller found it could overflow math in the test infrastructure and cause a WARNON by corrupting the reserved interval tree. This only effects test kernels with...

CVE-2025-71095

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix the crash issue for zero copy XDPTX action There is a crash issue when running zero copy XDPTX action, the crash log is shown below. 216.122464 Unable to handle kernel paging request at virtual address...

CVE-2025-40942

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.4. Affected application contains a local privilege escalation vulnerability that could allow an attacker to run arbitrary code with elevated privileges...

CVE-2025-13627

creationtimestamp| type| source ---|---|--- 2026-01-14 08:06:28+00:00| seen| https://gist.github.com/Darkcrai86/849324eebd7b6f1a7edcd0d7327dfcbb...

CVE-2025-68962

creationtimestamp| type| source ---|---|--- 2026-01-14 06:02:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcefgexkis22...

CVE-2025-68965

CVE-2025-68965 describes a permission/privilege control vulnerability in the Notepad module of Huawei HarmonyOS. Affected versions (per sources) include HarmonyOS 6.0.0 and 5.1.0, with exploitation potentially compromising service confidentiality via a privilege control flaw in the Notepad compon...

CVE-2025-68957

CVE-2025-68957 is a multi-thread race condition in Huawei HarmonyOS’s Card Framework module. Affected component: Card Framework; affected product/version: HarmonyOS (notably v6.0.0 per CNNVD). Impact: availability can be affected if exploited. Exploitability indicators from sources include local ...