CVE-2023-53462

In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in fillframeinfo Syzbot reports the following uninit-value access problem. ===================================================== BUG: KMSAN: uninit-value in fillframeinfo net/hsr/hsrforward.c:601 inli...

CVE-2022-50434

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix possible memleak when register 'hctx' failed There's issue as follows when do fault injection test: unreferenced object 0xffff888132a9f400 size 512: comm "insmod", pid 308021, jiffies 4324277909 age 509.733s hex dump...

CVE-2022-50455

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-53452

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential race condition between napiinit and napienable A race condition can happen if netdev is registered, but NAPI isn't initialized yet, and meanwhile user space starts the netdev that will enable NAPI. Then...

CVE-2023-53510

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp-cmd ufshcdqueuecommand may be called two times in a row for a SCSI command before it is completed. Hence make the following changes: - In the functions that submit a command, do not check the...

CVE-2025-39920

creationtimestamp| type| source ---|---|--- 2025-10-01 09:55:11+00:00| seen| https://gist.github.com/Darkcrai86/1c170ad9c03e3c6b3937d95451c81e3f 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...

RHSA-2023:7712

creationtimestamp| type| source ---|---|--- 2025-10-01 09:00:29+00:00| seen| Telegram/64WhroO1p3XYuqmPlOGugxyMhtXisRa-1RFnt2jGgqhJXI...

RHSA-2024:4619

creationtimestamp| type| source ---|---|--- 2025-10-01 09:00:27+00:00| seen| Telegram/-h2tA7k5LBgvws531-LzQjYT1zC4XZfun-87EvnaObsJ2E...

CVE-2025-39911

In the Linux kernel, the following vulnerability has been resolved: i40e: fix IRQ freeing in i40evsirequestirqmsix error path If requestirq in i40evsirequestirqmsix fails in an iteration later than the first, the error path wants to free the IRQs requested so far. However, it uses the wrong devid...

CVE-2025-39913

In the Linux kernel, the following vulnerability has been resolved: tcpbpf: Call skmsgfree when tcpbpfsendverdict fails to allocate psock-cork. syzbot reported the splat below. 0 The repro does the following: 1. Load a skmsg prog that calls bpfmsgcorkbytesmsg, corkbytes 2. Attach the prog to a...

CVE-2025-39924

In the Linux kernel, the following vulnerability has been resolved: erofs: fix invalid algorithm for encoded extents The current algorithm sanity checks do not properly apply to new encoded extents. Unify the algorithm check with ZEROFSCOMPRESSIONRUNTIMEMAX and ensure consistency with...

CVE-2025-39918

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list...

CVE-2025-39898

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-10725

creationtimestamp| type| source ---|---|--- 2025-10-01 04:33:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m247jhqjbu2k 2025-10-01 06:27:34+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m24fvg3det2e 2025-10-01 12:42:07+00:00| published-proof-of-concept|...

CVE-2025-52050

In Frappe ERPNext 15.57.5, the function getloyaltyprogramdetailswithpoints at erpnext/accounts/doctype/loyaltyprogram/loyaltyprogram.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the expirydate parameter...

CVE-2025-10659

creationtimestamp| type| source ---|---|--- 2025-10-01 00:03:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m23qgvko362k 2025-10-02 09:38:50+00:00| seen| https://gist.github.com/Darkcrai86/8b512e1615a02ce59e229b2a8fdac2fb...

PT-2025-40254

Name of the Vulnerable Software and Affected Versions TOTOLINK X18 version 9.1.0cu.2053 B20230309 Description The software contains a command injection issue through the agentName parameter within the setEasyMeshAgentCfg function. This allows for potential unauthorized command execution...

CVE-2025-6034

creationtimestamp| type| source ---|---|--- 2025-09-30 20:03:04+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3m23cyponwi23...

CVE-2025-61733

creationtimestamp| type| source ---|---|--- 2025-09-30 16:17:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m22wfji3ld23 2025-10-02 12:36:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115304601143297105 2025-10-06 13:48:27+00:00| seen|...

CVE-2025-52050

In Frappe ERPNext 15.57.5, the function getloyaltyprogramdetailswithpoints at erpnext/accounts/doctype/loyaltyprogram/loyaltyprogram.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the expirydate parameter...