CVE-2025-38224

In the Linux kernel, the following vulnerability has been resolved: can: kvaserpciefd: refine error prone echoskbmax handling logic echoskbmax should define the supported upper limit of echoskb allocated inside the netdevice's priv. The corresponding size value provided by this driver to...

CVE-2025-2504

creationtimestamp| type| source ---|---|--- 2025-07-06 01:07:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltb3hekfpm2s...

OSV-2025-525 UNKNOWN READ in std::__1::__function::__func<cv::PngDecoder::compose_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=429429085 Crash type: UNKNOWN READ Crash state: std::1::function::funccv::PngDecoder::composeframe cv::ParallelLoopBodyWrapper::operator cv::ThreadPool::run...

CVE-2025-53500

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MassEditRegex Extension allows Stored XSS.This issue affects Mediawiki - MassEditRegex Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from...

CVE-2025-7077

creationtimestamp| type| source ---|---|--- 2025-07-05 14:41:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114801145886520967 2025-07-06 08:31:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltbuawewal2l...

RHSA-2024:2042

creationtimestamp| type| source ---|---|--- 2025-07-05 03:15:03+00:00| seen| Telegram/WfJc7uPRoLJrV4N04ab0I6vzm3GHF9Cjyp48UCO6YlWFjs 2025-07-05 03:15:05+00:00| seen| Telegram/RHkgF7skTMhGpb13BzAtFn3sG2C9DjYxigsVldo5V7Ki1OA 2025-07-05 03:15:05+00:00| seen|...

CVE-2025-43711

creationtimestamp| type| source ---|---|--- 2025-07-05 01:33:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt6mhglops2u 2026-07-29 09:00:07+00:00| seen| https://t.me/divannyiit/3188 2026-07-30 00:02:06+00:00| seen| https://t.me/divannyiit/3188...

CVE-2025-7069

creationtimestamp| type| source ---|---|--- 2025-07-05 01:23:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt6lvjmvs22m...

CVE-2025-7070

creationtimestamp| type| source ---|---|--- 2025-07-05 01:18:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt6lml77zs2m 2025-08-06 13:54:19+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448...

SUSE CVE-2025-38176

In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfsevictinode Running 'stress-ng --binderfs 16 --timeout 300' under KASAN-enabled kernel, I've noticed the following: BUG: KASAN: slab-use-after-free in binderfsevictinode+0x1de/0x2d0 Write of...

GHSA-3QHF-M339-9G5V

creationtimestamp| type| source ---|---|--- 2025-07-04 23:16:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114797511485377082...

CVE-2025-38225

creationtimestamp| type| source ---|---|--- 2025-07-04 17:07:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt5q5esyy52r 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-38207

creationtimestamp| type| source ---|---|--- 2025-07-04 15:03:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114795569816587848 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-38224

In the Linux kernel, the following vulnerability has been resolved: can: kvaserpciefd: refine error prone echoskbmax handling logic echoskbmax should define the supported upper limit of echoskb allocated inside the netdevice's priv. The corresponding size value provided by this driver to...

CVE-2025-38213

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

DEBIAN-CVE-2025-38210

In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsmops Unlike sysfs, the lifetime of configfs objects is controlled by userspace. There is no mechanism for the kernel to find and delete all created config-items. Instead, the...

UBUNTU-CVE-2025-38203

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfsioctrim Syzkaller Report Oops: general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 1 KASAN: null-ptr-deref in range 0x0000000000000438-0x000000000000043f CPU: 2 UID:...

UBUNTU-CVE-2025-38227

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Terminating the subsequent process of initialization failure syzbot reported a slab-use-after-free Read in vidtvmuxinit. 1 After PSI initialization fails, the si member is accessed again, resulting in this uaf. Afte...

UBUNTU-CVE-2025-38210

In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsmops Unlike sysfs, the lifetime of configfs objects is controlled by userspace. There is no mechanism for the kernel to find and delete all created config-items. Instead, the...

CVE-2025-38226 media: vivid: Change the siize of the composing

In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 inline BUG: KASAN: vmalloc-out-of-bounds in...