24485 matches found
PT-2025-49497
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the ath12k qmi driver event work function within the ath12k driver. The issue occurs when the ATH12K FLAG UNREGISTERING bit is set, preventing the proper freeing ...
ALSA-2025:22854 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: Fix oops due to uninitialised variable CVE-2025-38737 kernel: can: j1939: implement NETDEVUNREGISTER notification handler CVE-2025-39925 kernel: Bluetooth: hcievent: Fix UAF in...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly freeing the event buffer, which could lead to a memory leak...
CVE-2025-65637 vulnerabilities
Vulnerabilities for packages: go-discover, terraform-provider-google-fips, kiam, hello-world-golang, neuvector-dbgen-fips, prometheus-beat-exporter-fips, aws-flb-cloudwatch-fips, src-fingerprint, kubeflow, aws-flb-cloudwatch, falcoctl-fips, consul, kube-fluentd-operator, docker-credential-gcr-fip...
GHSA-4F99-4Q7P-P3GH vulnerabilities
Vulnerabilities for packages: go-discover, terraform-provider-google-fips, kiam, hello-world-golang, neuvector-dbgen-fips, prometheus-beat-exporter-fips, aws-flb-cloudwatch-fips, src-fingerprint, kubeflow, aws-flb-cloudwatch, falcoctl-fips, consul, kube-fluentd-operator, docker-credential-gcr-fip...
GHSA-5MH9-3JWC-RP59 vulnerabilities
Vulnerabilities for packages: hubble-ui-backend-fips, sigstore-scaffolding-fips, knative-operator-fips, gcp-compute-persistent-disk-csi-driver-fips, flannel-cni-plugin-fips, gogatekeeper, keda-fips, kubelet-csr-approver, vertical-pod-autoscaler-fips, kuberay-operator-fips, monstache,...
CVE-2025-14192
creationtimestamp| type| source ---|---|--- 2025-12-07 17:10:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7fz2wqzxb2s...
EUVD-2025-201582
In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4freeolstateid Typically copynotify stateid is freed either when parent's stateid is being close/freed or in nfsd4laundromat if the stateid hasn't been used in a lease period. However, in case...
GHSA-XM2J-VFR9-MG9M
creationtimestamp| type| source ---|---|--- 2025-12-05 18:43:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115668433399350507 2025-12-06 03:23:18+00:00| seen| https://bsky.app/profile/cyber-news-fi.bsky.social/post/3m7c2eonwe62y...
CVE-2025-13144
creationtimestamp| type| source ---|---|--- 2025-12-05 12:57:30+00:00| seen| https://gist.github.com/Darkcrai86/77aae16ab00fe435afea5de53a2ddfdf...
CVE-2025-66536
creationtimestamp| type| source ---|---|--- 2025-12-05 06:40:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77uvxjbxi2a...
SUSE CVE-2025-40263
In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb - fix an invalid memory access If croseckeybregistermatrix isn't called due to buttonsswitchesonly in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in croseckeybprocess when...
CVE-2019-16693
creationtimestamp| type| source ---|---|--- 2025-12-04 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m76umspwnx2f...
CVE-2025-40263
In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb - fix an invalid memory access If croseckeybregistermatrix isn't called due to buttonsswitchesonly in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in croseckeybprocess when...
UBUNTU-CVE-2025-40249
In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: make sure the cdev fd is still active before emitting events With the final call to fput on a file descriptor, the release action may be deferred and scheduled on a work queue. The reference count of that descriptor i...
EUVD-2025-201194
In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb - fix an invalid memory access If croseckeybregistermatrix isn't called due to buttonsswitchesonly in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in croseckeybprocess when...
CVE-2025-40263 Input: cros_ec_keyb - fix an invalid memory access
In the Linux kernel, the following vulnerability has been resolved: Input: croseckeyb - fix an invalid memory access If croseckeybregistermatrix isn't called due to buttonsswitchesonly in croseckeybprobe, ckdev-idev remains NULL. An invalid memory access is observed in croseckeybprocess when...
EUVD-2025-201208
In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: make sure the cdev fd is still active before emitting events With the final call to fput on a file descriptor, the release action may be deferred and scheduled on a work queue. The reference count of that descriptor i...
CVE-2025-40220
CVE-2025-40220 (Linux kernel) fixes a livelock in synchronous file put paths on fuseblk workers. Analysis in the description shows AIO writers hang waiting for fuse responses and fuse server threads stall due to synchronous RELEASE/put behavior. The patch resolves the hang by ensuring asynchronou...