Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix legacy client tracking initialization CVE-2024-58092 In the Linux kernel, the following vulnerability has been resolved: keys: Fix UAF in keyput CVE-2025-21893 In the Linux kernel, the following...

Vulnerability of the ufshcd_exec_dev_cmd() function in the drivers/scsi/ufs/ufshcd.c module – This driver provides support for SCSI devices in the Linux operating system. It can be exploited by attackers to cause service failures.

Vulnerability of the ufshcdexecdevcmd function in the drivers/scsi/ufs/ufshcd.c module – The Linux kernel’s SCSI device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the nci_close_device() function in the net/nfc/nci/core.c module, which is part of the NFC NCI support for Linux operating systems, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nciclosedevice function in the net/nfc/nci/core.c module, which supports NFC NCI implementations in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, pluto, eksctl, flux-helm-controller, kubescape, helm-operator, helm-docs, cilium-cli, chart-testing, tw, cluster-api-helm-controller, k9s, chartmuseum, rancher-helm, helm-push, kots, zot, trivy, flux, k8ssandra-client, flux-source-controller, zarf...

GHSA-4HFP-H4CW-HJ8P vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, pluto, eksctl, flux-helm-controller, kubescape, helm-operator, helm-docs, cilium-cli, chart-testing, tw, cluster-api-helm-controller, k9s, chartmuseum, rancher-helm, helm-push, kots, zot, trivy, flux, k8ssandra-client, flux-source-controller, zarf...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, pluto, eksctl, flux-helm-controller, kubescape, helm-operator, helm-docs, cilium-cli, chart-testing, tw, cluster-api-helm-controller, k9s, chartmuseum, rancher-helm, helm-push, kots, zot, trivy, flux, k8ssandra-client, flux-source-controller, zarf...

GHSA-5XQW-8HWV-WG92 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl, pluto, eksctl, flux-helm-controller, kubescape, helm-operator, helm-docs, cilium-cli, chart-testing, tw, cluster-api-helm-controller, k9s, chartmuseum, rancher-helm, helm-push, kots, zot, trivy, flux, k8ssandra-client, flux-source-controller, zarf...

CVE-2025-32387 vulnerabilities

Vulnerabilities for packages: tw, helm-operator, cluster-api-helm-controller-fips, helm-operator-fips, helm-docs, cilium-cli, helm-push, consul-k8s, consul-k8s-fips, cert-manager-cmctl-fips, zot, chart-testing-fips, rancher-helm, flux-helm-controller, eksctl, harbor-fips, k9s, trivy,...

CVE-2025-32386 vulnerabilities

Vulnerabilities for packages: tw, helm-operator, cluster-api-helm-controller-fips, helm-operator-fips, helm-docs, cilium-cli, helm-push, consul-k8s, consul-k8s-fips, cert-manager-cmctl-fips, zot, chart-testing-fips, rancher-helm, flux-helm-controller, eksctl, harbor-fips, k9s, trivy,...

OESA-2025-1408 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add flushworkqueue to prevent uaf Our detector found a concurrent use-after-free bug when detaching an NCI device. The main reason for this bug is the...

ABB Cylon FLXeon 9.3.4 - Remote Code Execution (RCE)

Exploit title: ABB Cylon FLXeon 9.3.4 - Remote Code Execution RCE Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: FLXeon Series FBXi Series, FBTi Series, FBVi Series CBX Series FLX Series CBT Series CBV Series Firmware: =9.3.4 Summary: BACnet® Smart Building Controller...

ABB Cylon FLXeon 9.3.4 - Default Credentials

ABB Cylon FLXeon 9.3.4 Default Credentials Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: FLXeon Series FBXi Series, FBTi Series, FBVi Series CBX Series FLX Series CBT Series CBV Series ABB UC32 Series Main Plant Controllers Cylon's UnitronUC32.xx Firmware: =9.3.4...

ABB Cylon FLXeon 9.3.4 - Remote Code Execution (Authenticated)

Exploit Title: ABB Cylon FLXeon 9.3.4 - Remote Code Execution Authenticated Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: FLXeon Series FBXi Series, FBTi Series, FBVi Series CBX Series FLX Series CBT Series CBV Series Firmware: =9.3.4 Summary: BACnet® Smart Building...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, timoni, go-licenses, kube-fluentd-operator, swagger, ini-file, paranoia, aws-application-networking-k8s, octo-sts, gptscript, amass, buildah, cortex, kserve-rest-proxy, jaeger-operator, q, lvm-driver, hivemind, nri-postgresql, elvis...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-storage, timoni, go-licenses, kube-fluentd-operator, swagger, ini-file, paranoia, aws-application-networking-k8s, octo-sts, gptscript, amass, buildah, cortex, kserve-rest-proxy, jaeger-operator, q, lvm-driver, hivemind, nri-postgresql, elvis...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: terraform-provider-time-fips, k3s, cass-operator-fips, cilium-fips, kube-logging-logging-operator, nri-mssql, opencost-fips, rootlesskit, trust-manager, prometheus-postgres-exporter, fulcio, consul-k8s, kube-metrics-adapter, vault-secrets-operator,...

CVE-2025-29391

horvey Library-Manager v1.0 is vulnerable to SQL Injection in Admin/Controller/BookController.class.php...

SUSE CVE-2025-22011

In the Linux kernel, the following vulnerability has been resolved: ARM: dts: bcm2711: Fix xHCI power-domain During s2idle tests on the Raspberry CM4 the VPU firmware always crashes on xHCI power-domain resume: root@raspberrypi:/sys/power echo freeze state 70.724347 xhcisuspend finished 70.727730...

CVE-2025-29391

The horvey Library-Manager v1.0 is vulnerable to SQL Injection within the Admin/Controller/BookController.class.php file. An attacker could exploit this flaw to interact with the underlying database. No specific exploit details or exploit links are provided beyond a mention of a published proof-o...

CVE-2025-29391: Improper Neutralization of Special Elements used in an SQL Command

horvey Library-Manager v1.0 is vulnerable to SQL Injection in Admin/Controller/BookController.class.php...