EUVD-2025-24267

Malicious code in bioql PyPI...

kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface

A flaw was found in the Linux kernel's IPsec packet transformation xfrm interface. A local user with network administration privileges can exploit this flaw to cause a Denial of Service DoS by crashing the system. This vulnerability occurs due to improper state validation when modifying...

UBUNTU-CVE-2025-38500

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...