CVE-2025-23134

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Don't take registermutex with copyfrom/touser The infamous mmaplock taken in copyfrom/touser can be often problematic when it's called inside another mutex, as they might lead to deadlocks. In the case of ALSA timer...

CVE-2025-22118

In the Linux kernel, the following vulnerability has been resolved: ice: validate queue quanta parameters to prevent OOB access Add queue wraparound prevention in quanta configuration. Ensure endqid does not overflow by validating startqid and numqueues...

CVE-2025-22068

In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq-canceling is set when queue is frozen Now ublk driver depends on ubq-canceling for deciding if the request can be dispatched via uringcmd & iouringcmdcompleteintask. Once ubq-canceling is set, the uringcmd can...

CVE-2023-53034

In the Linux kernel, the following vulnerability has been resolved: ntbhwswitchtec: Fix shift-out-of-bounds in switchtecntbmwsettrans There is a kernel API ntbmwcleartrans would pass 0 to both addr and size. This would make xlatepos negative. 23.734156 switchtec switchtec0: MW 0: part 0 addr...

CVE-2025-22056

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfttunnel: fix geneveopt type confusion addition When handling multiple NFTATUNNELKEYOPTSGENEVE attributes, the parsing logic should place every geneveopt structure one by one compactly. Hence, when deciding the next...

CVE-2024-58093

In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstream function removal Before 456d8aa37d0f "PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free", we would free the ASPM link only after the last function on the b...

CVE-2025-22044

In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpinfitctl Syzkaller has reported a warning in tonfitbusuuid: "only secondary bus families can be translated". This warning is emited if the argument is equal to NVDIMMBUSFAMILYNFIT == 0...

CVE-2025-22060

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM memory, and the cached shadow SRAM information, from concurrent modifications. Both the TCAM and SRAM tables are indirectly accessed by configuring an...

CVE-2025-22047

In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix applymicrocodeamd's return value When verifysha256digest fails, applymicrocodeamd should propagate the failure by returning false and not -1 which is promoted to true...

CVE-2025-22045

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix flushtlbrange when used for zapping normal PMDs On the following path, flushtlbrange can be used for zapping normal PMD entries PMD entries that point to page tables together with the PTE entries in the pointed-to pag...

CVE-2025-22055

In the Linux kernel, the following vulnerability has been resolved: net: fix geneveopt length integer overflow struct geneveopt uses 5 bit length for each single option, which means every vary size option should be smaller than 128 bytes. However, all current related Netlink policies cannot promi...

GHSA-H4Q8-96P6-JCGR

creationtimestamp| type| source ---|---|--- 2025-04-16 14:56:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12060...

WordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Html5 Audio Player versions = 2.2.28...

WordPress Membership For WooCommerce plugin <= 2.8.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Membership For WooCommerce versions = 2.8.0...

CVE-2025-39546

creationtimestamp| type| source ---|---|--- 2025-04-16 13:56:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12045...

CVE-2025-26908

creationtimestamp| type| source ---|---|--- 2025-04-16 13:55:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12043...

CVE-2025-39584

creationtimestamp| type| source ---|---|--- 2025-04-16 12:57:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12034 2025-04-16 14:43:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwtccatlw2u 2025-04-16 16:02:55+00:00| seen|...

CVE-2025-39578

creationtimestamp| type| source ---|---|--- 2025-04-16 12:57:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12030...

CVE-2025-39570

creationtimestamp| type| source ---|---|--- 2025-04-16 12:56:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12022 2025-04-16 14:49:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114348194618384395...

CVE-2025-3684

creationtimestamp| type| source ---|---|--- 2025-04-16 11:57:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12019 2025-04-16 13:31:15+00:00| seen| https://t.me/cvedetector/23066...