PT-2025-37247

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel where the host may access stale data in the event ring due to a device updating the events ring pointer before updating the event contents. This can...

PT-2025-29511

Name of the Vulnerable Software and Affected Versions: Indico versions 2.2 through 3.3.7 Description: Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. An endpoint used to display details of users listed in certain fields could be...

CVE-2025-52954

creationtimestamp| type| source ---|---|--- 2025-07-11 15:24:12+00:00| seen| Telegram/7hdWvzymsvMz6-ZyD9Yi7ERCn1nXN5uCafzcDekC8Mcc 2026-01-23 21:25:30+00:00| seen| Telegram/yGqzgYQc-4J5XY87W8s44ridAroexFkO0Vh6dcUxSF7Pu0...

CVE-2025-52951

creationtimestamp| type| source ---|---|--- 2025-07-11 15:24:11+00:00| seen| Telegram/kkSDHnydT8KB8qrfX5aVARNi4bfYfHed2L6Zq5TyfaKN4M...

CVE-2025-52948

creationtimestamp| type| source ---|---|--- 2025-07-11 15:24:04+00:00| seen| Telegram/KwcT9JHG2ASMkC6MSKh65jZfiKcM9S3aOqCXeH2ZsSJMwGo...

matrix-sdk-sqlite: SQL injection vulnerability in `SqliteEventCacheStore::find_event_with_relations`

The SqliteEventCacheStore::findeventwithrelations function constructs SQL queries using format! with unescaped input, allowing an attacker to inject arbitrary SQL. This results in a SQL injection vulnerability...

perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init

...

tracing: Verify event formats that have "%*p.."

...

usb: dwc3: gadget: check that event count does not exceed event buffer length

...

RDMA/cma: Fix workqueue crash in cma_netevent_work_handler

...

perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.

...

bpf: Fix deadlock between rcu_tasks_trace and event_mutex.

...

The vulnerability of Windows Event Tracing service allows attackers to enhance their privileges.

The vulnerability of Windows Event Tracing in operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-53549 Matrix Rust SDK allows SQL injection in the EventCache implementation

The Matrix Rust SDK is a collection of libraries that make it easier to build Matrix clients in Rust. An SQL injection vulnerability in the EventCache::findeventwithrelations method of matrix-sdk 0.11 and 0.12 allows malicious room members to execute arbitrary SQL commands in Matrix clients that...

CVE-2023-24904

creationtimestamp| type| source ---|---|--- 2025-07-10 17:22:17+00:00| seen| Telegram/Lr8SZ0wFyZWv9ZCfkkYo5cIeN2hV45rCcwVeWsMLyOw5c...

CVE-2025-47985

Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2025-49660

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2025-21466

Memory corruption while processing a private escape command in an event trigger...

AZL-64896 CVE-2025-38335 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: Input: gpio-keys - fix a sleep while atomic with PREEMPTRT When enabling PREEMPTRT, the gpiokeysirqtimer callback runs in hard irq context, but the inputevent takes a spinlock, which isn't allowed there as it is converted to a...

DEBIAN-CVE-2025-38322

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix crash in iclupdatetopdownevent The perffuzzer found a hard-lockup crash on a RaptorLake machine: Oops: general protection fault, maybe for address 0xffff89aeceab400: 0000 CPU: 23 UID: 0 PID: 0 Comm: swapper/23...