CVE-2023-53296

In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after waitforsndbuf This patch fixes a corner case where the asoc out stream count may change after waitforsndbuf. When the main thread in the client starts a connection, if its out stream count is...

CVE-2023-53300

In the Linux kernel, the following vulnerability has been resolved: media: hi846: Fix memleak in hi846initcontrols hi846initcontrols doesn't clean the allocated ctrlhdlr in case there is a failure, which causes memleak. Add v4l2ctrlhandlerfree to free the resource properly...

CVE-2025-43344

creationtimestamp| type| source ---|---|--- 2025-09-16 01:41:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyw6wkhgpq2t 2025-09-17 23:14:57+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lz2xnuhons2d...

CVE-2023-53270

In the Linux kernel, the following vulnerability has been resolved: ext4: fix idisksize exceeding isize problem in paritally written case It is possible for idisksize can exceed isize, triggering a warning. genericperformwrite copied = iovitercopyfromuseratomiclen // copied idisksize, newsize //...

CVE-2023-53267

In the Linux kernel, the following vulnerability has been resolved: driver: soc: xilinx: fix memory leak in xlnxaddcbfornotifyevent The kfree should be called when memory fails to be allocated for cbdata in xlnxaddcbfornotifyevent, otherwise there will be a memory leak, so add kfree to fix it...

Dolusoft Omaspot SQL Injection Vulnerability

Dolusoft Omaspot is a network access management tool from Dolusoft Turkey. A SQL injection vulnerability exists in Dolusoft Omaspot versions prior to 12.09.2025, which stems from improper neutralization of special elements and can lead to SQL injection attacks...

Beefull App security vulnerabilities

Beefull App is a shared energy network application from Beefull Turkey. A security vulnerability exists in Beefull App versions prior to 24.07.2025, which stems from a user-controllable key leading to an authorization bypass that could exploit trusted identifiers...

Dolusoft Omaspot security vulnerability

Dolusoft Omaspot is a network access management tool from the Turkish company Dolusoft. A security vulnerability exists in Dolusoft Omaspot versions prior to 12.09.2025, which stems from the transmission of sensitive information in clear text and could lead to interception and elevation of...

SUSE CVE-2022-50328

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix potential use-after-free in jbd2fcwaitbufs In 'jbd2fcwaitbufs' use 'bh' after put buffer head reference count which may lead to use-after-free. So judge buffer if uptodate before put buffer head reference count...

CVE-2025-43312

creationtimestamp| type| source ---|---|--- 2025-09-15 22:44:22+00:00| seen| Telegram/ccEmItq1YSKHI2mEEUQmAooGnjkatfOTOWmrBrQ8Fatbbw...

CVE-2025-43294

creationtimestamp| type| source ---|---|--- 2025-09-15 22:44:20+00:00| seen| Telegram/aOWEBE1zE7qaurRaNxK40omrnzXoZyw-FrIYgvzX3ebCL3Y...

CVE-2025-59399

creationtimestamp| type| source ---|---|--- 2025-09-15 21:15:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyvpzufsax2x...

CVE-2022-50300

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in readonechunk Store the error code before freeing the extentmap. Though it's reference counted structure, in that function it's the first and last allocation so...

CVE-2022-50308

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Add checks for devmkcalloc As the devmkcalloc may return NULL, the return value needs to be checked to avoid NULL poineter dereference...

CVE-2022-50303

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix double release compute pasid If kfdprocessdeviceinitvm returns failure after vm is converted to compute vm and vm-pasid set to compute pasid, KFD will not take pdd-drmfile reference. As a result, drm close file...

CVE-2023-53247

In the Linux kernel, the following vulnerability has been resolved: btrfs: setpageextentmapped after readfolio in btrfscontexpand While trying to get the subpage blocksize tests running, I hit the following panic on generic/476 assertion failed: PagePrivatepage && page-private, in...

CVE-2025-10448

creationtimestamp| type| source ---|---|--- 2025-09-15 14:43:31+00:00| seen| https://gist.github.com/Darkcrai86/89cf396607cbe6f8bb174601991d0d29...

CVE-2022-50235

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READDIR Restore the previous limit on the @count argument to prevent a buffer overflow attack...

CVE-2023-53167

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix null pointer dereference in tracingerrlogopen Fix an issue in function 'tracingerrlogopen'. The function doesn't call 'seqopen' if the file is opened only with write permissions, which results in 'file-privatedata'...

CVE-2022-50243

In the Linux kernel, the following vulnerability has been resolved: sctp: handle the error returned from sctpauthasocinitactivekey When it returns an error from sctpauthasocinitactivekey, the activekey is actually not updated. The old shkey will be freeed while it's still used as active key in...