CVE-2025-71084 RDMA/cm: Fix leaking the multicast GID table reference

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancelworksync will prevent the work from running which also prevents destroying the...

CVE-2025-68798

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc-eventsidx can become NULL in a subtle race condition with NMI-throttle-x86pmustop. Check event for NULL in amdpmuenableall before enable to avoid a GPF. Th...

CVE-2025-68798 perf/x86/amd: Check event before enable to avoid GPF

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc-eventsidx can become NULL in a subtle race condition with NMI-throttle-x86pmustop. Check event for NULL in amdpmuenableall before enable to avoid a GPF. Th...

CVE-2025-68781 usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal

In the Linux kernel, the following vulnerability has been resolved: usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal The delayed work item otgevent is initialized in fslotgconf and scheduled under two conditions: 1. When a host controller binds to the OTG controller. 2...

CVE-2025-68770

CVE-2025-68770 affects the bnxt_en driver in the Linux kernel. The issue occurs in the XDP_TX path: in bnxt_rx_xdp(), the event flags can be cleared too early when the XDP_TX action is taken again, potentially while the TX ring has no room. This can cause the TX producer to advance without the dr...

CVE-2025-68770 bnxt_en: Fix XDP_TX path

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix XDPTX path For XDPTX action in bnxtrxxdp, clearing of the event flags is not correct. bnxtpollwork - bnxtrxpkt - bnxtrxxdp may be looping within NAPI and some event flags may be set in earlier iterations. In particula...

Exploit for Deserialization of Untrusted Data in Solarwinds Security_Event_Manager

CVE-...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/sctp: A null dereference in the sctpdisposition sctpsfdo51Dce function has been fixed. If newasoc-peer.adaptationind=0, sctpulpeventmakeauthkey=0, and sctpulpeventmakeauthkey returns 0, then the variable aiev remains zero, an...

CVE-2026-0504

creationtimestamp| type| source ---|---|--- 2026-01-13 05:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcbtnv2vjq2x 2026-01-13 06:48:14+00:00| seen| https://vulnerability.circl.lu/bundle/79cf05e4-8e7e-4859-b145-d69bffb52412 2026-01-13 07:59:47+00:00| seen|...

CVE-2025-66177

creationtimestamp| type| source ---|---|--- 2026-01-13 03:55:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcbnugd2vj2b 2026-01-13 04:00:34+00:00| seen| Telegram/UkQy5p66ZqtUntQbyuL7Mmw6MfrjmrDI9c523Bq1eF22IU 2026-01-13 06:02:27+00:00| seen|...

CVE-2026-23949

creationtimestamp| type| source ---|---|--- 2026-01-13 02:50:10+00:00| published-proof-of-concept| https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2 2026-01-20 01:50:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mct265xpal2i 2026-01-20...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of event flags in the XDPTX path in the bnxten driver, which could result in the TX doorbe...

Linux Distros Unpatched Vulnerability : CVE-2025-68770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bnxten: Fix XDPTX path For XDPTX action in bnxtrxxdp, clearing of the event flags is not...

Linux Distros Unpatched Vulnerability : CVE-2025-68798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc-eventsidx can become NULL in a subtle race condition with NMI-throttle-x86pmustop. Che...

CVE-2025-58770

creationtimestamp| type| source ---|---|--- 2026-01-12 16:02:59+00:00| seen| Telegram/XntR8Q08ItQqPRQ7FMyZvktk-SlD6Wr0fFrSW9Df9BO1jiA...

CVE-2025-14672

creationtimestamp| type| source ---|---|--- 2026-01-12 15:02:17+00:00| seen| Telegram/y0eQAbUKuWo3WgNQ26iaWbPj3ea5ybOv03pwHsLfPooVzvs...

kernel: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue

A flaw was discovered in the Bluetooth subsystem of the Linux kernel. When processing a HCIEVNUMCOMPPKTS event, the function hciconntxdequeue did not properly hold or release the hdev device lock, which may lead to a use-after-free of the connection structure...

EUVD-2026-1939

Stored Cross-Site Scripting XSS vulnerability in WorkDo's eCommerceGo SaaS, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request to ‘/ticket/x/conversion’, using the ‘replydescription’ parameter...

CVE-2025-20773

creationtimestamp| type| source ---|---|--- 2026-01-12 10:01:47+00:00| seen| Telegram/B4Ns6MZa2yeXCPgPlhBOXwBNRpMHFi0mVOBvEF18yEU0jtA...

CVE-2025-69267

creationtimestamp| type| source ---|---|--- 2026-01-12 06:01:26+00:00| seen| Telegram/pWbuGN1KVOAQ47r4fm52NlPcXYWbBQdOrOq5aZ05KasKkpQ 2026-01-12 06:04:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc7emjnlro2c 2026-01-12 08:10:36+00:00| seen|...