UBUNTU-CVE-2025-37833

In the Linux kernel, the following vulnerability has been resolved: net/niu: Niu requires MSIX ENTRYDATA fields touch before entry reads Fix niutrymsix to not cause a fatal trap on sparc systems. Set PCIDEVFLAGSMSIXTOUCHENTRYDATAFIRST on the struct pcidev to work around a bug in the hardware or...

CVE-2025-37833 net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads

In the Linux kernel, the following vulnerability has been resolved: net/niu: Niu requires MSIX ENTRYDATA fields touch before entry reads Fix niutrymsix to not cause a fatal trap on sparc systems. Set PCIDEVFLAGSMSIXTOUCHENTRYDATAFIRST on the struct pcidev to work around a bug in the hardware or...

CVE-2025-37818

LoongArch Linux kernel vulnerability CVE-2025-37818: the issue originates from huge_pte_offset() returning a PMD slot pointer even when the underlying pmd points to an invalid_pte_table, which could be misinterpreted as a swap entry by generic is_swap_pte() and lead to a crash in pfn_swap_entry_t...

CVE-2025-37818 LoongArch: Return NULL from huge_pte_offset() for invalid PMD

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Return NULL from hugepteoffset for invalid PMD LoongArch's hugepteoffset currently returns a pointer to a PMD slot even if the underlying entry points to invalidptetable indicating no mapping. Callers like...

CVE-2025-33093

creationtimestamp| type| source ---|---|--- 2025-05-07 11:22:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15290 2025-05-07 12:21:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114466521491649706 2025-05-07 12:26:34+00:00| seen|...

CVE-2025-20954

Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...

SUSE CVE-2022-49815

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing xasretry in fscache mode The xarray iteration only holds the RCU read lock and thus may encounter XARETRYENTRY if there's process modifying the xarray concurrently. This will cause oops when referring to the...

SUSE CVE-2022-49858

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix SQE threshold checking Current way of checking available SQE count which is based on HW updated SQB count could result in driver submitting an SQE even before CQE for the previously transmitted SQE at the same...

CVE-2025-26262

creationtimestamp| type| source ---|---|--- 2025-05-06 18:21:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis5wt6a2h 2025-05-06 20:20:18+00:00| seen| https://t.me/cvedetector/24626...

Online Warehouse Stanislav Savchenko Website OK (No. 3 dated May 6, 2025 at 19:21:06)

...

CVE-2024-58134

Mojolicious versions from 0.999922 through 9.40 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default. These predictable default secrets can be exploited to forge session cookies. An attacker who knows or guesses the secret could compute valid HMA...

CVE-2025-4262

creationtimestamp| type| source ---|---|--- 2025-05-05 04:18:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14832 2025-05-05 06:16:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofprjedkj2w 2025-05-05 07:30:45+00:00| exploited|...

SoK: Stealing Cars since Remote Keyless Entry Introduction and How to Defend from It

Remote Keyless Entry RKE systems have been the target of thieves since their introduction in automotive industry. Robberies targeting vehicles and their remote entry systems are booming again without a significant advancement from the industrial sector being able to protect against them...

CVE-2023-53039

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function When a reset notify IPC message is received, the ISR schedules a work function and passes the ISHTP device to it via a global pointer ishtpdev. If ishprobe...

CVE-2022-49848

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-combo: fix NULL-deref on runtime resume Commit fc64623637da "phy: qcom-qmp-combo,usb: add support for separate PCSUSB region" started treating the PCSUSB registers as potentially separate from the PCS registers but...

CVE-2025-4131

creationtimestamp| type| source ---|---|--- 2025-05-02 06:07:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo65rumphs2h 2025-05-02 07:34:52+00:00| seen| https://t.me/cvedetector/24325 2025-05-02 17:16:45+00:00| published-proof-of-concept|...

DEBIAN-CVE-2022-49888

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: avoid kprobe recursion The cortexa76erratum1463225debughandler function is called when handling debug exceptions and synchronous exceptions from BRK instructions, and so is called when a probed function executes. If...

CVE-2022-49879

In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUGON when directory entry has invalid reclen The reclen field in the directory entry has to be a multiple of 4. A corrupted filesystem image can be used to hit a BUG in ext4reclentodisk, called from makeindexeddir...

DEBIAN-CVE-2022-49846

In the Linux kernel, the following vulnerability has been resolved: udf: Fix a slab-out-of-bounds write bug in udffindentry Syzbot reported a slab-out-of-bounds Write bug: loop0: detected capacity change from 0 to 2048 ================================================================== BUG: KASAN:...

DEBIAN-CVE-2022-49815

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing xasretry in fscache mode The xarray iteration only holds the RCU read lock and thus may encounter XARETRYENTRY if there's process modifying the xarray concurrently. This will cause oops when referring to the...