Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2025.

Summary Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF001 and 24.0.0-IF004. Vulnerability Details CVEID:CVE-2024-10963 DESCRIPTION: A flaw was found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostname...

New episode “In the Trend of VM” (#12): 8 February CVEs & Why the Darknet Matters for VM Specialists

New episode "In the Trend of VM" 12: 8 February CVEs & Why the Darknet Matters for VM Specialists. Now with a new design and new video editing. Video on YouTube and LinkedIn Post on Habr rus Digest on the PT website Content: 00:00 Greetings 00:23 Remote Code Execution - Windows Lightweight...

CVE-2025-0159

creationtimestamp| type| source ---|---|--- 2025-02-28 19:20:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114083131418296123 2025-02-28 19:26:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5955 2025-02-28 20:08:31+00:00| seen|...

CVE-2024-8425

creationtimestamp| type| source ---|---|--- 2025-02-28 09:27:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5860 2025-02-28 11:10:24+00:00| seen| https://t.me/cvedetector/19135 2025-02-28 11:48:48+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114081354392866059 2025-04-...

CVE-2025-27531

creationtimestamp| type| source ---|---|--- 2025-02-28 04:24:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lj7kruepf32q 2025-06-06 15:39:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114637169259974567...

CVE-2025-25725

creationtimestamp| type| source ---|---|--- 2025-02-28 02:45:47+00:00| seen| https://gist.github.com/Ekkosun/a83870ce7f3b7813b9b462a395e8ad92...

CVE-2024-38291

creationtimestamp| type| source ---|---|--- 2025-02-28 01:08:15+00:00| seen| https://t.me/cvedetector/19100 2025-02-28 01:53:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj7cct45yb25 2025-02-28 17:27:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5928 2025-02-28...

CVE-2025-1682

creationtimestamp| type| source ---|---|--- 2025-02-28 00:25:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5825 2025-02-28 01:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114078994918555296 2025-02-28 03:38:46+00:00| seen| https://t.me/cvedetector/19105 2025-03-...

CVE-2025-21817

creationtimestamp| type| source ---|---|--- 2025-02-27 21:58:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj6v7yqr6a2w 2025-02-27 23:27:01+00:00| seen| https://t.me/cvedetector/19085 2025-06-19 13:39:55+00:00| published-proof-of-concept|...

CVE-2024-38514

creationtimestamp| type| source ---|---|--- 2025-02-27 21:02:06+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lj6s25smgr2t 2025-03-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-03-09 2025-03-29 00:00:00+00:00| exploited| The...

CVE-2025-21810

In the Linux kernel, the following vulnerability has been resolved: driver core: class: Fix wild pointer dereferences in API classdeviternext There are a potential wild pointer dereferences issue regarding APIs classdeviterinit|next|exit, as explained by below typical usage: // All members of @it...

CVE-2025-21808

In the Linux kernel, the following vulnerability has been resolved: net: xdp: Disallow attaching device-bound programs in generic mode Device-bound programs are used to support RX metadata kfuncs. These kfuncs are driver-specific and rely on the driver context to read the metadata. This means the...

CVE-2025-21799

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65cpswnussremovetxchns When getting the IRQ we use k3udmagluetxgetirq which returns negative error value on error. So not NULL check is not sufficient to deteremine if IRQ is...

CVE-2025-21814

In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info-enable callback is always set The ioctl and sysfs handlers unconditionally call the -enable callback. Not all drivers implement that callback, leading to NULL dereferences. Example of affected drivers: ptps390.c,...

CVE-2024-58034

In the Linux kernel, the following vulnerability has been resolved: memory: tegra20-emc: fix an OF node reference bug in tegraemcfindnodebyramcode As offindnodebyname release the reference of the argument device node, tegraemcfindnodebyramcode releases some device nodes while still in use,...

CVE-2025-21800

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix definer's HWSSET32 macro for negative offset When bit offset for HWSSET32 macro is negative, UBSAN complains about the shift-out-of-bounds: UBSAN: shift-out-of-bounds in...

CVE-2025-27157

creationtimestamp| type| source ---|---|--- 2025-02-27 17:25:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5720 2025-02-27 18:18:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114077225711677534 2025-02-27 19:15:38+00:00| seen|...

GHSA-V39F-C9JJ-8W7H

creationtimestamp| type| source ---|---|--- 2025-02-27 17:25:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5720 2025-02-27 18:18:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114077225711677534...

CVE-2025-25334

creationtimestamp| type| source ---|---|--- 2025-02-27 16:26:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5714 2025-02-27 19:15:45+00:00| seen| https://t.me/cvedetector/19055 2025-03-02 11:45:37+00:00| seen| Telegram/uscqOGixP5GX-PPvEBLdAxPDez--6rNRun58ogbMSxJnAXuA...

CVE-2025-1756

creationtimestamp| type| source ---|---|--- 2025-02-27 16:26:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5713 2025-02-27 17:02:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114076927570984469 2025-02-27 17:53:44+00:00| seen|...