AZL-62788 CVE-2025-23131 affecting package kernel for versions less than 6.6.144.1-1

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

DEBIAN-CVE-2025-23131

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

UBUNTU-CVE-2025-23131

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to eventdone douevent returns the value written to eventdone. In case it is a positive value, newlockspace would undo all the work, and lockspace would not be set. dlmnewlockspace,...

CVE-2025-39575

creationtimestamp| type| source ---|---|--- 2025-04-16 12:56:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12027 2025-04-16 16:03:09+00:00| seen| https://t.me/cvedetector/23104...

CVE-2025-3685

creationtimestamp| type| source ---|---|--- 2025-04-16 11:57:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12018 2025-04-16 13:31:17+00:00| seen| https://t.me/cvedetector/23069...

DEBIAN-CVE-2025-22022

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints Two clearly different specimens of NEC uPD720200 one with start/stop bug, one without were seen to cause IOMMU faults after some Missed Service Errors. Faulting address ...

UBUNTU-CVE-2025-22022

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints Two clearly different specimens of NEC uPD720200 one with start/stop bug, one without were seen to cause IOMMU faults after some Missed Service Errors. Faulting address ...

CVE-2025-22023 usb: xhci: Don't skip on Stopped - Length Invalid

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid Up until commit d56b0b2ab142 "usb: xhci: ensure skipped isoc TDs are returned when isoc ring is stopped" in v6.11, the driver didn't skip missed isochronous TDs when handling...

CVE-2025-22023

CVE-2025-22023 concerns the Linux kernel USB xHCI driver. The issue arises from not skipping missed isochronous TDs when handling Stopped/Stopped-Length-Invalid events, causing the ring to potentially stall and the affected TDs to be cancelled incorrectly. A patch (commit d56b0b2ab142) introduced...

Security update for expat

This update for expat fixes the following issues: - CVE-2024-8176: Fixed denial of service from chaining a large number of entities caused by stack overflow by resolving use of recursion bsc1239618 Other fixes: - version update to 2.7.1 jscPED-12500 Bug fixes: 980 989 Restore event pointer...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference that may result when dlm handles positive eventdone values...

The vulnerability of the input_event() function in the drivers/hid/hid-appleir.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the inputevent function in the drivers/hid/hid-appleir.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2025-30729

creationtimestamp| type| source ---|---|--- 2025-04-15 20:55:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11916...

CVE-2025-30732

creationtimestamp| type| source ---|---|--- 2025-04-15 20:55:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11913...

CVE-2025-32445 Users can gain privileged access to the host system and cluster with EventSource and Sensor CR

Argo Events is an event-driven workflow automation framework for Kubernetes. A user with permission to create/modify EventSource and Sensor custom resources can gain privileged access to the host system and cluster, even without having direct administrative privileges. The EventSource and Sensor...

CVE-2015-10002

creationtimestamp| type| source ---|---|--- 2025-04-15 14:55:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11825...

CVE-2025-32944

creationtimestamp| type| source ---|---|--- 2025-04-15 14:15:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114342397806384726 2025-04-15 16:38:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmujatjtho2z 2025-04-15 17:26:34+00:00| seen| https://t.me/cvedetector/229...

CVE-2025-26744

creationtimestamp| type| source ---|---|--- 2025-04-15 12:54:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11801 2025-04-15 15:46:27+00:00| seen| https://t.me/cvedetector/22951...

CVE-2025-3574

creationtimestamp| type| source ---|---|--- 2025-04-15 08:55:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11775 2025-04-15 12:01:16+00:00| seen| Telegram/p3dOqAKCX1N8voarp4buM6tUI75kV6N-doMergTPyUUjU 2025-04-15 13:15:44+00:00| seen| https://t.me/cvedetector/22929...

CVE-2024-13207

creationtimestamp| type| source ---|---|--- 2025-04-15 06:54:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11773 2025-04-15 08:38:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmtofrv2ux2a 2025-04-15 09:04:49+00:00| seen| https://t.me/cvedetector/22925...