CVE-2025-22045 x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix flushtlbrange when used for zapping normal PMDs On the following path, flushtlbrange can be used for zapping normal PMD entries PMD entries that point to page tables together with the PTE entries in the pointed-to pag...

CVE-2025-22034 mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs

In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLLSPLITPMD with hugetlb VMAs Patch series "mm: fixes for device-exclusive entries hmm", v2. Discussing the PageTail call in makedeviceexclusiverange with Willy, I recently discovered 1 that device-exclusive...

CVE-2025-22034 mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs

In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLLSPLITPMD with hugetlb VMAs Patch series "mm: fixes for device-exclusive entries hmm", v2. Discussing the PageTail call in makedeviceexclusiverange with Willy, I recently discovered 1 that device-exclusive...

CVE-2025-22034

CVE-2025-22034 concerns the Linux kernel mm/gup path and the handling of FOLL_SPLIT_PMD with hugetlb VMAs. The connected documents indicate a patch series addressing device-exclusive entries (hmm) and that THP interaction was a motivating factor, with hugetlb fencing and mapcount interactions imp...

CVE-2025-3619

creationtimestamp| type| source ---|---|--- 2025-04-16 00:54:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114344909037165232 2025-04-16 07:11:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lmvzyo7xik2r 2025-04-16 09:06:20+00:00| seen|...

PT-2025-20514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the cleanup of FDB, MDB, and VLAN entries on unbind. The issue arises from the assumption that higher layers have balanc...

CVE-2025-22034: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLLSPLITPMD with hugetlb VMAs Patch series "mm: fixes for device-exclusive entries hmm", v2. Discussing the PageTail call in makedeviceexclusiverange with Willy, I recently discovered 1 that device-exclusive...

RHEL 7 : openstack-neutron (RHSA-2014:1942)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:1942 advisory. OpenStack Networking neutron is a pluggable, scalable, and API-driven system that provisions networking services to virtual machines. Its main functi...

CVE-2024-01021

creationtimestamp| type| source ---|---|--- 2025-04-13 23:57:38+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqatnjjms2i 2025-04-13 23:58:30+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lmqav6wih22i 2025-04-14 00:03:30+00:00| seen|...

CVE-2025-3535

creationtimestamp| type| source ---|---|--- 2025-04-13 11:52:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11560 2025-04-13 12:42:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114330708197191527 2025-04-13 14:28:17+00:00| seen|...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2025-1359)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Improper Input Validation

Overview org.apache.poi:poi-ooxml is a Java API To Access Microsoft Format Files. Affected versions of this package are vulnerable to Improper Input Validation due to the parsing process of OOXML format files. An attacker can manipulate the file content by adding zip entries with duplicate names,...

Apache POI OOXML Vulnerable to Improper Input Validation in OOXML File Parsing

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...

DEBIAN-CVE-2025-31672

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...

UBUNTU-CVE-2025-31672

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...

CVE-2025-31672

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...

CVE-2025-31672 Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...

CVE-2025-30640

creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-239/ 2025-04-24 20:35:42+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lnlkookgds2g 2025-04-26 06:32:16+00:00| seen|...

AMD64 Microcode Data Compromise

The vulnerability of AMD64 Microcode in processors relates to the improper handling of certain special address ranges with invalid device table entries. Exploiting this vulnerability can allow an attacker to compromise data integrity...

CVE-2025-31672: Improper Input Validation

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...