kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 "iwcm: free cmid resources on the last deref" simplified cmid resource management by freeing cmid once all references to the cmid were...

CVE-2025-64734

creationtimestamp| type| source ---|---|--- 2025-11-18 05:28:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5uyyg46vf2x...

Siemens SCALANCE and RUGGEDCOM Devices Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2024-39499)

vmci: speculation leaks by sanitizing event in eventdeliver. eventmsg is controlled by user-space, eventmsg-eventdata.event is passed to eventdeliver and used as an index without sanitization, leading to information leaks. This plugin only works with Tenable.ot. Please visit...

BIT-MOODLE-2025-62400 Moodle: hidden group names visible to event creators

Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information...

CVE-2024-44654

creationtimestamp| type| source ---|---|--- 2025-11-17 21:09:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5u534xxbq2k...

CVE-2025-64342 ESF-IDF's ESP32 Bluetooth Controller Has an Invalid Access Address Vulnerability

ESF-IDF is the Espressif Internet of Things IOT Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address AA of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly...

What It Takes to Design Trust into Event-Driven Architectures with Amazon EventBridge

How disciplined design turns Amazon EventBridge from an open event bus into a system of verified trust. Event-driven architecture has become essential for achieving agility in the cloud. Yet as integrations multiply, so do the hidden pathways that adversaries can exploit. Amazon EventBridge helps...

CVE-2025-64027

creationtimestamp| type| source ---|---|--- 2025-11-17 15:00:08+00:00| exploited| Telegram/qn6bp8YUpk0QotLnP9WKGw1cgZ9AzFWXwr3JDEbfbgSiUY 2025-11-20 19:33:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m63j46lvob2q 2026-06-19 12:45:46+00:00| exploited|...

CVE-2025-36460

creationtimestamp| type| source ---|---|--- 2025-11-17 14:30:17+00:00| seen| https://infosec.place/objects/f0ff24dd-b424-4838-a02b-7e7d2fc4cfa8 2025-11-18 01:18:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ukyhvw6h26...

CVE-2025-13163

creationtimestamp| type| source ---|---|--- 2025-11-17 07:30:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5spdns3e72n...

CVE-2025-60022

creationtimestamp| type| source ---|---|--- 2025-11-17 07:12:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5sodej5wq2k...

CVE-2025-13259

creationtimestamp| type| source ---|---|--- 2025-11-17 03:12:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5savvqa2b2j...

SUSE CVE-2025-40187

In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce If newasoc-peer.adaptationind=0 and sctpulpeventmakeauthkey=0 and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero and the zero will be...

CVE-2025-12149

creationtimestamp| type| source ---|---|--- 2025-11-14 15:09:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5lxkrcesf2a...

CVE-2025-55073

creationtimestamp| type| source ---|---|--- 2025-11-14 09:03:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ld5kyri22x 2025-11-14 10:41:12+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5lik2vrb3c2...

CVE-2024-9126

creationtimestamp| type| source ---|---|--- 2025-11-14 05:25:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5kwxf2io42n 2025-11-14 06:40:53+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5l34lf546y2...

SUSE CVE-2025-40191

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kfd process ref leaking when userptr unmapping kfdlookupprocessbypid hold the kfd process reference to ensure it doesn't get destroyed while sending the segfault event to user space. Calling kfdlookupprocessbypid ...

CVE-2025-46368

creationtimestamp| type| source ---|---|--- 2025-11-13 21:08:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5k35eanpv2k...

CVE-2025-60679

creationtimestamp| type| source ---|---|--- 2025-11-13 19:38:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115544079480228162 2025-11-13 21:05:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5k2yhtll42u...

CVE-2025-7704

creationtimestamp| type| source ---|---|--- 2025-11-13 11:31:33+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5j2vizigom2 2025-11-13 14:02:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5jddsknl52b...