rtnetlink: Allocate vfinfo size for VF GUIDs when supported

...

CVE-2025-38337

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix data-race and null-ptr-deref in jbd2journaldirtymetadata Since handle-htransaction may be a NULL pointer, so we should change it to call ishandleabortedhandle first before dereferencing it. And the following data-race w...

AZL-64926 CVE-2025-38319 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrlinitializemcregtable The function atomctrlinitializemcregtable and atomctrlinitializemcregtablev22 does not check the return value of smuatomgetdatatable. If...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds memory read in the csdspmockbinaddnameorinfo function...

CVE-2025-0141

creationtimestamp| type| source ---|---|--- 2025-07-09 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0141 2025-07-09 16:23:10+00:00| seen| https://infosec.exchange/users/mttaggart/statuses/114824196232360547 2025-07-09 19:03:26+00:00| seen|...

The vulnerabilities in the page-flags.h, mmflags.h, vmcore_info.c, and hugetlb.c components of the Linux operating system’s kernel allow a hacker to cause a service failure.

The vulnerability of the page-flags.h, mmflags.h, vmcoreinfo.c, and hugetlb.c components of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Wikimedia Mediawiki - IPInfo Extension 安全漏洞

Wikimedia Mediawiki - IPInfo Extension is an extension from the Wikimedia Foundation for displaying IP information. A security vulnerability exists in Wikimedia Mediawiki - IPInfo Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from improper input...

DEBIAN-CVE-2025-38106

In the Linux kernel, the following vulnerability has been resolved: iouring: fix use-after-free of sq-thread in iouringshowfdinfo syzbot reports: BUG: KASAN: slab-use-after-free in getrusage+0x1109/0x1a60 Read of size 8 at addr ffff88810de2d2c8 by task a.out/304 CPU: 0 UID: 0 PID: 304 Comm: a.out...

CVE-2025-27459

creationtimestamp| type| source ---|---|--- 2025-07-03 06:21:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/114787856061012885 2025-07-03 15:28:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt325dafdz2r...

CVE-2025-24333

creationtimestamp| type| source ---|---|--- 2025-07-02 12:47:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114783712216991743 2025-07-02 13:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsybfklirt2u...

Malicious code in env-info-checker-kyy3w4fiurevd8uy43wfre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d6fb3feadb029e83e642c54a8ffc29782d65e981a2bd769dc972463231215b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5552 Malicious code in env-info-checker-kyy3w4fiurevd8uy43wfre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d6fb3feadb029e83e642c54a8ffc29782d65e981a2bd769dc972463231215b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

USN-7614-1 pcs vulnerabilities

Cedric Buissart discovered that pcs did not correctly handle certain parameters. An attacker could possibly use this issue to leak sensitive information or elevate their privileges. This issue only affected Ubuntu 16.04 LTS. CVE-2018-1086 Ondrej Mular discovered that pcs did not correctly handle...

CVE-2025-34064

creationtimestamp| type| source ---|---|--- 2025-07-01 15:07:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20043 2025-07-01 15:58:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114778801913249591 2025-08-06 13:54:20+00:00| seen|...

CVE-2025-5072

creationtimestamp| type| source ---|---|--- 2025-07-01 09:11:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20010 2025-07-01 12:26:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114777968065544988 2025-07-01 12:58:20+00:00| seen|...

MAL-2025-5514 Malicious code in os-info-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5db90325052a54f4806fa3551b5830ecb62ee7544dff34a58a48549719bf266 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-6899

A vulnerability, which was classified as critical, was found in D-Link DI-7300G+ and DI-8200G 17.12.20A1/19.12.25A1. This affects an unknown part of the file mspinfo.htm. The manipulation of the argument flag/cmd/iface leads to os command injection. It is possible to initiate the attack remotely...

kernel: eth: bnxt: fix truesize for mb-xdp-pass case

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix truesize for mb-xdp-pass case When mb-xdp is set and return is XDPPASS, packet is converted from xdpbuff to skbuff with xdpupdateskbsharedinfo in bnxtxdpbuildskb. bnxtxdpbuildskb passes incorrect truesize argument ...

CVE-2025-20702

creationtimestamp| type| source ---|---|--- 2025-06-30 04:18:42+00:00| published-proof-of-concept| https://t.me/CyberBulletin/3544 2025-06-30 05:30:34+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lsshdtlu522v 2025-06-30 06:34:55+00:00| seen|...

SUSE-SU-2025:20453-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2025-4476: Fixed null pointer dereference that may lead to denial of service bsc1243422 - CVE-2025-4948: Fixed Integer Underflow in soupmultipartnewfrommessage Leading to Denial of Service in libsoup bsc1243332 - CVE-2025-4969: Fixed...