CVE-2025-29512

creationtimestamp| type| source ---|---|--- 2025-04-18 18:58:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12527 2025-04-18 20:33:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrfhs3v2y 2025-04-18 20:45:32+00:00| seen|...

CVE-2025-24914

creationtimestamp| type| source ---|---|--- 2025-04-18 18:58:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12523 2025-04-18 19:42:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dtq37a5i2 2025-04-18 19:56:20+00:00| seen|...

CVE-2025-28355

creationtimestamp| type| source ---|---|--- 2025-04-18 17:00:10+00:00| published-proof-of-concept| Telegram/025r9Ac4mA6AzmYH4V5jxzygPRuLIkjd6NMrYR-gf6fiv4 2025-04-18 18:58:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12522 2025-04-18 19:35:23+00:00| seen|...

GHSA-MG2H-6X62-WPWC

creationtimestamp| type| source ---|---|--- 2025-04-18 16:59:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12494 2025-04-18 17:10:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114360071872639571 2025-04-18 19:30:43+00:00| published-proof-of-concept|...

CVE-2024-11421

creationtimestamp| type| source ---|---|--- 2025-04-18 16:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln42fpdyix2c...

CVE-2025-37838

In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: Fix use after free vulnerability in ssiprotocol Driver Due to Race Condition In the ssiprotocolprobe function, &ssi-work is bound with ssipxmitwork, In ssippnsetup, the ssippnxmit function within the ssippnops...

CVE-2025-39735

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in eaget During the "sizecheck" label in eaget, the code checks if the extended attribute list xattr size matches easize. If not, it logs "eaget: invalid extended attribute" and calls printhexdump...

CVE-2025-3791

CVE-2025-3791 affects symisc UnQLite, specifically the jx9MemObjStore function in /data/src/benchmarks/unqlite/unqlite.c. Reports describe a heap-based buffer overflow that enables a local attacker to trigger exploitation on the host. The vulnerability is confirmed across multiple feeds and linke...

CVE-2025-37838

CVE-2025-37838 affects the Linux kernel HSI ssi_protocol: a use-after-free can occur due to a race between ssi_protocol_probe() binding ssi->work to ssip_xmit_work() and ssi_protocol_remove() freeing ssi via kfree(ssi) while the work is still potentially in use. The connected Azure Linux 3.0 a...

CVE-2025-39930

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use freedevicenode at graphutilparsedai commit 419d1918105e "ASoC: simple-card-utils: use freedevicenode for device node" uses freedevicenode for dlc-ofnode, but we need to keep it while driver is i...

CVE-2025-38479

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: free irq correctly in remove path Add fsledma-txirq/errirq check to avoid below warning because no errirq at i.MX9 platform. Otherwise there will be kernel dump: WARNING: CPU: 0 PID: 11 at...

CVE-2025-39755 staging: gpib: Fix cb7210 pcmcia Oops

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix cb7210 pcmcia Oops The pcmciadriver struct was still only using the old .name initialization in the drv field. This led to a NULL pointer deref Oops in strcmp called from pcmciaregisterdriver. Initialize the...

CVE-2025-39755

CVE-2025-39755 affects the Linux kernel (staging: gpib) where the pcmcia_driver struct used the old .name initialization in the drv field, causing a NULL pointer dereference in strcmp during pcmcia_register_driver. The fix is to initialize the pcmcia_driver struct name field. Impact is a local at...

BELL-CVE-2025-22104

Bulletin has no description...

CVE-2025-22037

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in allocpreauthhash The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup even thought conn-preauthinfo is not...

CVE-2025-22085

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use-after-free when rename device name Syzbot reported a slab-use-after-free with the following call trace: ================================================================== BUG: KASAN: slab-use-after-free in...

CVE-2025-22052

In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix Oops after disconnect in niusb If the usb dongle is disconnected subsequent calls to the driver cause a NULL dereference Oops as the businterface is set to NULL on disconnect. This problem was introduced by...

CVE-2025-22097

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkmsexit function might access an uninitialized or freed defaultconfig pointer and it might double free it. Fix both possible erro...

CVE-2025-22084

In the Linux kernel, the following vulnerability has been resolved: w1: fix NULL pointer dereference in probe The w1uartprobe function calls w1uartserdevopen which includes devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer...

CVE-2025-22077

In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts commit e9f2517a3e18a54a3943c098d2226b245d488801. Commit e9f2517a3e18 "smb: client: fix TCP timers deadlock after rmmod" is intended to fix a null-ptr-deref in...