CVE-2025-40301 Bluetooth: hci_event: validate skb length for unknown CC opcode

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: validate skb length for unknown CC opcode In hcicmdcompleteevt, if the command complete event has an unknown opcode, we assume the first byte of the remaining skb-data contains the return status. However,...

PT-2025-49433

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's Bluetooth implementation within the hci cmd complete evt function. Specifically, the code does not validate the length of the socket buffer skb before...

PT-2025-49497

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the ath12k qmi driver event work function within the ath12k driver. The issue occurs when the ATH12K FLAG UNREGISTERING bit is set, preventing the proper freeing ...

ALSA-2025:22854 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: Fix oops due to uninitialised variable CVE-2025-38737 kernel: can: j1939: implement NETDEVUNREGISTER notification handler CVE-2025-39925 kernel: Bluetooth: hcievent: Fix UAF in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly freeing the event buffer, which could lead to a memory leak...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, kiam, docker-credential-gcr, consul, kubernetes-event-exporter-fips, smokescreen, neuvector-dbgen, stakater-reloader, kubeflow-fips, neuvector-dbgen-fips, gostatsd, prometheus-beat-exporter, terraform-provider-google, src-fingerprint, aws-flb-kinesi...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose, kiam, docker-credential-gcr, consul, kubernetes-event-exporter-fips, smokescreen, neuvector-dbgen, stakater-reloader, kubeflow-fips, neuvector-dbgen-fips, gostatsd, prometheus-beat-exporter, terraform-provider-google, src-fingerprint, aws-flb-kinesi...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: spire-controller-manager, timescaledb-tune, spiffe-helper-fips, nri-consul, rancher, cloud-provider-azure-fips, cluster-api-aws-controller-fips, metrics-server-fips, kyverno-policy-reporter-ui-fips, kubo-fips, terraform-provider-random-fips, postgres-operator,...

CVE-2025-14192

creationtimestamp| type| source ---|---|--- 2025-12-07 17:10:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7fz2wqzxb2s...

EUVD-2025-201582

In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4freeolstateid Typically copynotify stateid is freed either when parent's stateid is being close/freed or in nfsd4laundromat if the stateid hasn't been used in a lease period. However, in case...

GHSA-XM2J-VFR9-MG9M

creationtimestamp| type| source ---|---|--- 2025-12-05 18:43:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115668433399350507 2025-12-06 03:23:18+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3m7c2eonwe62y...

CVE-2025-13144

creationtimestamp| type| source ---|---|--- 2025-12-05 12:57:30+00:00| seen| https://gist.github.com/Darkcrai86/77aae16ab00fe435afea5de53a2ddfdf...

CVE-2025-66536

creationtimestamp| type| source ---|---|--- 2025-12-05 06:40:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77uvxjbxi2a...

SUSE CVE-2025-40263

In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb - fix an invalid memory access If croseckeybregistermatrix isn't called due to buttonsswitchesonly in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in croseckeybprocess when...

CVE-2019-16693

creationtimestamp| type| source ---|---|--- 2025-12-04 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m76umspwnx2f...

CVE-2025-40263

In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb - fix an invalid memory access If croseckeybregistermatrix isn't called due to buttonsswitchesonly in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in croseckeybprocess when...

UBUNTU-CVE-2025-40249

In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: make sure the cdev fd is still active before emitting events With the final call to fput on a file descriptor, the release action may be deferred and scheduled on a work queue. The reference count of that descriptor i...

CVE-2025-40263 Input: cros_ec_keyb - fix an invalid memory access

In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb - fix an invalid memory access If croseckeybregistermatrix isn't called due to buttonsswitchesonly in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in croseckeybprocess when...

EUVD-2025-201194

In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb - fix an invalid memory access If croseckeybregistermatrix isn't called due to buttonsswitchesonly in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in croseckeybprocess when...

EUVD-2025-201208

In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: make sure the cdev fd is still active before emitting events With the final call to fput on a file descriptor, the release action may be deferred and scheduled on a work queue. The reference count of that descriptor i...