UBUNTU-CVE-2025-68288

In the Linux kernel, the following vulnerability has been resolved: usb: storage: Fix memory leak in USB bulk transport A kernel memory leak was identified by the 'ioctlsg01' test from Linux Test Project LTP. The following bytes were mainly observed: 0x53425355. When USB storage devices incorrect...

CVE-2025-68288

In the Linux kernel, the following vulnerability has been resolved: usb: storage: Fix memory leak in USB bulk transport A kernel memory leak was identified by the 'ioctlsg01' test from Linux Test Project LTP. The following bytes were mainly observed: 0x53425355. When USB storage devices incorrect...

CVE-2025-68264

creationtimestamp| type| source ---|---|--- 2025-12-16 16:01:58+00:00| seen| https://gist.github.com/Darkcrai86/fa20646168039dc463d140b597b5342d 2025-12-16 17:21:25+00:00| seen| https://gist.github.com/Darkcrai86/6513c58916be78d9080290be39ae8257 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-68182

creationtimestamp| type| source ---|---|--- 2025-12-16 15:17:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115729906402943844...

CVE-2025-68257

In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot identified an issue 1 that crashes kernel, seemingly due to unexistent callback dev-getvalidroutes. By all means, this should not occur as said callback must always b...

CVE-2025-68257

In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot identified an issue 1 that crashes kernel, seemingly due to unexistent callback dev-getvalidroutes. By all means, this should not occur as said callback must always b...

CVE-2025-68288 usb: storage: Fix memory leak in USB bulk transport

In the Linux kernel, the following vulnerability has been resolved: usb: storage: Fix memory leak in USB bulk transport A kernel memory leak was identified by the 'ioctlsg01' test from Linux Test Project LTP. The following bytes were mainly observed: 0x53425355. When USB storage devices incorrect...

CVE-2025-68287 usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3removerequests call paths This patch addresses a race condition caused by unsynchronized execution of multiple call paths invoking dwc3removerequests, leading to premature...

CVE-2025-68172

creationtimestamp| type| source ---|---|--- 2025-12-16 15:03:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115729851462860633 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

CVE-2025-14730

creationtimestamp| type| source ---|---|--- 2025-12-16 15:03:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115729851400584628...

CVE-2025-68257

In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot identified an issue 1 that crashes kernel, seemingly due to unexistent callback dev-getvalidroutes. By all means, this should not occur as said callback must always b...

CVE-2025-68257 comedi: check device's attached status in compat ioctls

In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot identified an issue 1 that crashes kernel, seemingly due to unexistent callback dev-getvalidroutes. By all means, this should not occur as said callback must always b...

CVE-2025-68257

CVE-2025-68257 : Linux kernel COMEDI subsystem vulnerability where compat ioctl handlers could dereference a NULL callback when the device was not attached. Root cause: compat ioctls lacked a proper sanity check of device attached status, allowing a NULL dereference in path leading to a crash. Fi...

CVE-2025-68257 comedi: check device's attached status in compat ioctls

In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot identified an issue 1 that crashes kernel, seemingly due to unexistent callback dev-getvalidroutes. By all means, this should not occur as said callback must always b...

CVE-2025-9452

creationtimestamp| type| source ---|---|--- 2025-12-16 13:47:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729552193462662 2025-12-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1120/...

CVE-2025-14593

creationtimestamp| type| source ---|---|--- 2025-12-16 13:47:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729552193462662 2025-12-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1123/...

CVE-2025-9456

creationtimestamp| type| source ---|---|--- 2025-12-16 13:45:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729547415365209 2025-12-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1116/ 2025-12-17 05:00:00+00:00| seen|...

CVE-2025-10889

creationtimestamp| type| source ---|---|--- 2025-12-16 13:42:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729535654423399 2025-12-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1106/...

CVE-2025-10899

creationtimestamp| type| source ---|---|--- 2025-12-16 13:42:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729535654423399 2025-12-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1121/...

GHSA-565G-HWWR-4PP3

creationtimestamp| type| source ---|---|--- 2025-12-16 13:41:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729529089646381 2026-01-02 18:47:00+00:00| published-proof-of-concept| Telegram/909Vqfy1t-GN-jmnJRhonTHruzsnwKWBWvcbC9dRm7P3pmc...