CVE-2025-57106

Kitware VTK Visualization Toolkit up to 9.5.0 is vulnerable to Buffer Overflow in vtkGLTFDocumentLoader. The vulnerability occurs in the BufferDataExtractionWorker template function when processing GLTF accessor data...

CVE-2025-40100

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when creating free space tree Currently, when building a free space tree at populatefreespacetree, if we are not using the block group tree feature, we always expect to find block...

CVE-2025-40089

In the Linux kernel, the following vulnerability has been resolved: cxl/features: Add check for no entries in cxlfeatureinfo cxl EDAC calls cxlfeatureinfo to get the feature information and if the hardware has no Features support, cxlfs may be passed in as NULL. 51.957498 BUG: kernel NULL pointer...

CVE-2025-40101

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST At the end of btrfsloadblockgroupzoneinfo the first thing we do is to ensure that if the mapping type is not a SINGLE one and there is no RAID stripe...

CVE-2025-40103

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix refcount leak for cifssbtlink Fix three refcount inconsistency issues related to cifssbtlink. Comments for cifssbtlink state that cifsputtlink needs to be called after successful calls to cifssbtlink. Three calls...

CVE-2025-10317

creationtimestamp| type| source ---|---|--- 2025-10-30 15:34:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gbxhnr3u2u...

CVE-2025-50736

creationtimestamp| type| source ---|---|--- 2025-10-30 15:32:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gbtuvdoh2n...

CVE-2025-12476

creationtimestamp| type| source ---|---|--- 2025-10-30 06:01:40+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m4fbxrm7jq27...

CVE-2025-54547 On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired

On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions e.g, scp, sftp multiplexed onto the same channel could perform file-system operations after a configured session timeout expired...

CVE-2025-58189

When Conn.Handshake fails during ALPN negotiation the error contains attacker controlled information the ALPN protocols sent by the client which is not escaped...

CVE-2025-11232

To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "^A-Za-z0-9.-"; "hostname-char-replacement" must be empty the default; and "ddns-qualifying-suffix" must NOT be empty the default is empty. DDNS...

CVE-2025-64146

creationtimestamp| type| source ---|---|--- 2025-10-29 13:51:57+00:00| seen| Telegram/CiKHVz4lpRooyhoVguQabjIiCCJATS7qKemwPbJAJINKROU...

CVE-2025-64296

creationtimestamp| type| source ---|---|--- 2025-10-29 05:32:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4cpvhf2yf2p...

CVE-2025-62230

creationtimestamp| type| source ---|---|--- 2025-10-28 19:36:57+00:00| seen| https://gist.github.com/EbonJaeger/8496c1190b0924aa057e7408ff20115f 2025-10-28 23:15:00+00:00| seen| Telegram/V3P1JlxxMdUouo9e-Koxqu6gS-6GfrGho2omrfdKlE-yanE 2025-10-29 04:00:00+00:00| seen|...

CVE-2025-40063

In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc and free ops In commit 42d9f6c77479 "crypto: acomp - Move scomp stream allocation code into acomp", the cryptoacompstreams struct was made to rely on having the allocctx and...

CVE-2025-40057

In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on maxvclocks syzbot reported WARNING in maxvclocksstore. This occurs when the argument max is too large for kcalloc to handle. Extend the guard to guard against values that are too large for kcalloc...

CVE-2025-40037

In the Linux kernel, the following vulnerability has been resolved: fbdev: simplefb: Fix use after free in simplefbdetachgenpds The pmdomain cleanup can not be devres managed as it uses struct simplefbpar which is allocated within struct fbinfo by framebufferalloc. This allocation is explicitly...

CVE-2025-40050

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip scalar adjustment for BPFNEG if dst is a pointer In checkaluop, the verifier currently calls checkregarg and adjustscalarminmaxvals unconditionally for BPFNEG operations. However, if the destination register holds a...

CVE-2025-34317

creationtimestamp| type| source ---|---|--- 2025-10-28 15:43:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115452557190111700 2025-10-28 17:47:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4bihfuwyl2n...

CVE-2025-40075

creationtimestamp| type| source ---|---|--- 2025-10-28 14:48:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4b6hwvews26 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...