CVE-2025-22061

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix qid report in airohatcgethtbgetleafqueue Fix the following kernel warning deleting HTB offloaded leafs and/or root HTB qdisc in airohaeth driver properly reporting qid in airohatcgethtbgetleafqueue routine. $tc...

CVE-2025-22035 tracing: Fix use-after-free in print_graph_function_flags during tracer switching

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in printgraphfunctionflags during tracer switching Kairui reported a UAF issue in printgraphfunctionflags during ftrace stress testing 1. This issue can be reproduced if puting a 'mdelay10' after...

CVE-2025-22028 media: vimc: skip .s_stream() for stopped entities

In the Linux kernel, the following vulnerability has been resolved: media: vimc: skip .sstream for stopped entities Syzbot reported 1 a warning prompted by a check in callsstream that checks whether .sstream operation is warranted for unstarted or stopped subdevs. Add a simple fix in...

CVE-2025-22023

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid Up until commit d56b0b2ab142 "usb: xhci: ensure skipped isoc TDs are returned when isoc ring is stopped" in v6.11, the driver didn't skip missed isochronous TDs when handling...

CVE-2025-39570

creationtimestamp| type| source ---|---|--- 2025-04-16 12:56:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12022 2025-04-16 14:49:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114348194618384395...

DEBIAN-CVE-2025-22020

In the Linux kernel, the following vulnerability has been resolved: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in rtsxusbmspollcard+0x159/0x20...

CVE-2025-27538

creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfur454s2q 2025-04-16 11:50:53+00:00| seen| https://t.me/cvedetector/23057...

CVE-2025-22020 memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove

In the Linux kernel, the following vulnerability has been resolved: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove This fixes the following crash: ================================================================== BUG: KASAN: slab-use-after-free in rtsxusbmspollcard+0x159/0x20...

CVE-2025-3077

creationtimestamp| type| source ---|---|--- 2025-04-16 07:55:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11992 2025-04-16 10:43:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfusoyul2a 2025-04-16 11:50:55+00:00| seen| https://t.me/cvedetector/23059...

CVE-2025-3668

creationtimestamp| type| source ---|---|--- 2025-04-16 04:55:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11988 2025-04-16 06:48:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmvyq7f3ki2z 2025-04-16 10:10:33+00:00| seen|...

CVE-2025-3663

creationtimestamp| type| source ---|---|--- 2025-04-16 02:55:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11981 2025-04-16 06:48:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmvyq6xkae2a 2025-04-16 07:40:07+00:00| seen|...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a ksmbd dacloffset boundary check overflow...

CVE-2025-30712

creationtimestamp| type| source ---|---|--- 2025-04-15 22:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114344414863733394 2025-04-16 00:23:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmvd77q6rd2v 2025-04-17 04:57:25+00:00| seen|...

CVE-2025-22900

creationtimestamp| type| source ---|---|--- 2025-04-15 22:28:12+00:00| seen| https://t.me/cvedetector/23005 2025-04-16 16:48:21+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114348661119837676...

CVE-2025-30733

Vulnerability in the RDBMS Listener component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS Listener. Successful...

CVE-2025-30727

creationtimestamp| type| source ---|---|--- 2025-04-15 20:55:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11918 2025-04-15 21:04:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114344004369359958 2025-04-15 22:48:41+00:00| seen|...

CVE-2025-30727

...

CVE-2025-27791

creationtimestamp| type| source ---|---|--- 2025-04-15 20:08:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114343784101287084 2025-04-15 22:28:06+00:00| seen| https://t.me/cvedetector/23001...

Fake PDFCandy File Converter Websites Spread Malware

CloudSEK uncovers a sophisticated malware campaign where attackers impersonate PDFCandy.com to distribute the ArechClient2 information stealer. Learn how…...

CVE-2025-32776

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. By writing specially crafted data to the matrixcustomframe file, an attacker can cause the custom kernel driver to read more bytes than provided by user space. This data will...