CVE-2025-22034

In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLLSPLITPMD with hugetlb VMAs Patch series "mm: fixes for device-exclusive entries hmm", v2. Discussing the PageTail call in makedeviceexclusiverange with Willy, I recently discovered 1 that device-exclusive...

CVE-2025-22026

In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svcprocregister Currently, nfsdprocstatinit ignores the return value of svcprocregister. If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix...

CVE-2025-22050

In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rxcomplete Missing usbnetgoingaway Check in Critical Path. The usbsubmiturb function lacks a usbnetgoingaway validation, whereas usbnetqueueskb includes this check. This inconsistency creates a race conditio...

CVE-2025-22048

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Don't override subprog's return value The verifier test calls: div by 0 in subprog triggers a panic at the ld.bu instruction. The ld.bu insn is trying to load byte from memory address returned by the subprog. The...

CVE-2025-22059

In the Linux kernel, the following vulnerability has been resolved: udp: Fix multiple wraparounds of sk-skrmemalloc. udpenqueuescheduleskb has the following condition: if atomicread&sk-skrmemalloc sk-skrcvbuf goto drop; sk-skrcvbuf is initialised by net.core.rmemdefault and later can be configure...

CVE-2025-22033

In the Linux kernel, the following vulnerability has been resolved: arm64: Don't call NULL in docompatalignmentfixup doalignmentt32tohandler only fixes up alignment faults for specific instructions; it returns NULL otherwise e.g. LDREX. When that's the case, signal to the caller that it needs to...

CVE-2025-22052

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix Oops after disconnect in niusb If the usb dongle is disconnected subsequent calls to the driver cause a NULL dereference Oops as the businterface is set to NULL on disconnect. This problem was introduced by...

CVE-2025-22041

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbdsessionsderegister In multichannel mode, UAF issue can occur in sessionderegister when the second channel sets up a session through the connection of the first channel. session that is freed...

CVE-2025-22051

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix Oops after disconnect in agilent usb If the agilent usb dongle is disconnected subsequent calls to the driver cause a NULL dereference Oops as the businterface is set to NULL on disconnect. This problem was...

CVE-2025-1275

creationtimestamp| type| source ---|---|--- 2025-04-16 14:56:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12068...

CVE-2025-3689

creationtimestamp| type| source ---|---|--- 2025-04-16 14:44:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwtcdidrj2z 2025-04-16 16:02:42+00:00| seen| https://t.me/cvedetector/23087...

CVE-2025-3690

creationtimestamp| type| source ---|---|--- 2025-04-16 14:44:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwtccrde52l 2025-04-16 16:02:42+00:00| seen| https://t.me/cvedetector/23088...

WordPress HelpGent plugin <= 2.2.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by LVT-tholv2k in WordPress Plugin HelpGent versions = 2.2.5...

CVE-2025-39592

creationtimestamp| type| source ---|---|--- 2025-04-16 12:57:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12039 2025-04-16 14:44:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwtcchmuu2i 2025-04-16 16:02:58+00:00| seen| https://t.me/cvedetector/23101...

CVE-2025-39585

creationtimestamp| type| source ---|---|--- 2025-04-16 12:57:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12035 2025-04-16 14:44:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwtcckwej2z 2025-04-16 16:02:56+00:00| seen| https://t.me/cvedetector/23098...

CVE-2024-58092

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization Get rid of the nfsd4legacytrackingops-init call in checkforlegacymethods. That will be handled in the caller nfsd4clienttrackinginit. Otherwise, we'll wind up calling...

CVE-2025-22023

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid Up until commit d56b0b2ab142 "usb: xhci: ensure skipped isoc TDs are returned when isoc ring is stopped" in v6.11, the driver didn't skip missed isochronous TDs when handling...

CVE-2025-3676

creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfuslm4i2l 2025-04-16 11:50:56+00:00| seen| https://t.me/cvedetector/23060...

CVE-2025-27571

creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfuroneq2h 2025-04-16 11:50:54+00:00| seen| https://t.me/cvedetector/23058...

CVE-2022-23409

creationtimestamp| type| source ---|---|--- 2025-04-16 09:33:03+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lmwbwf7wz32i 2025-04-17 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvy34xv2x...