CVE-2025-21968

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free on hdcpwork Why A slab-use-after-free is reported when HDCP is destroyed but the propertyvalidatedwork queue is still running. How Cancel the delayed work when destroying workqueue. cherry...

CVE-2025-21941

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipectx-planestate in resourcebuildscalingparams Null pointer dereference issue could occur when pipectx-planestate is null. The fix adds a check to ensure 'pipectx-planestate' is not null befo...

CVE-2025-21909

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject cooked mode if it is set along with other flags It is possible to set both MONITORFLAGCOOKFRAMES and MONITORFLAGACTIVE flags simultaneously on the same monitor interface from the userspace. This causes a...

CVE-2025-21904

In the Linux kernel, the following vulnerability has been resolved: caifvirtio: fix wrong pointer check in cfvprobe delvqs frees virtqueues, therefore cfv-vqtx pointer should be checked for NULL before calling it, not cfv-vdev. Also the current implementation is redundant because the pointer...

CVE-2025-21924

In the Linux kernel, the following vulnerability has been resolved: net: hns3: make sure ptp clock is unregister and freed if hclgeptpgetcycle returns an error During the initialization of ptp, hclgeptpgetcycle might return an error and returned directly without unregister clock and free it. To...

CVE-2025-21960

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: do not update checksum in bnxtxdpbuildskb The bnxtrxpkt updates ipsummed value at the end if checksum offload is enabled. When the XDP-MB program is attached and it returns XDPPASS, the bnxtxdpbuildskb is called to...

CVE-2025-21934

In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rioaddnet fails rioaddnet calls deviceregister and fails when deviceregister fails. Thus, putdevice should be used rather than kfree. Add "mport-net = NULL;" to avoid a use after free issue...

CVE-2025-21914

In the Linux kernel, the following vulnerability has been resolved: slimbus: messaging: Free transaction ID in delayed interrupt scenario In case of interrupt delay for any reason, slimdotransfer returns timeout error but the transaction ID TID is not freed. This results into invalid memory acces...

CVE-2025-21943

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both newdevicestore and deletedevicestore touch module global resources e.g. gpioaggregatorlock. To prevent race conditions with module unload, a reference need...

CVE-2025-21945

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2lock If smblock-zerolen has value, -llist of smblock is not delete and flock is old one. It will cause use-after-free on error handling routine...

CVE-2025-21921

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: netlink: Allow NULL nlattrs when getting a phydevice ethnlreqgetphydev is used to lookup a phydevice, in the case an ethtool netlink command targets a specific phydev within a netdev's topology. It takes as a...

CVE-2025-3068

Inappropriate implementation in Intents in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-21984

In the Linux kernel, the following vulnerability has been resolved: mm: fix kernel BUG when userfaultfdmove encounters swapcache userfaultfdmove checks whether the PTE entry is present or a swap entry. - If the PTE entry is present, movepresentpte handles folio migration by setting: srcfolio-inde...

CVE-2025-31125

A flaw was found in the Vite Node.js package. Vite exposes content of non-allowed files using ?inline or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using the --host or server.host config options are affected...

CVE-2025-21985

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bound accesses WHAT & HOW hpostreamtolinkencodermapping has size MAXHPODP2ENCODERS=4, but location can have size up to 6. As a result, it is necessary to check location against MAXHPODP2ENCODERS...

CVE-2025-31089

creationtimestamp| type| source ---|---|--- 2025-04-01 23:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114265379011567967 2025-04-02 00:46:12+00:00| seen| https://bsky.app/profile/redteamnews.bsky.social/post/3lls5xhhhhb23 2025-04-02 14:34:11+00:00|...

CVE-2025-3032

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks...

CVE-2023-46988

creationtimestamp| type| source ---|---|--- 2025-04-01 22:21:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114265037010819061 2025-04-01 22:21:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114265037010819061 2025-04-01 22:32:46+00:00| published-proof-of-concept|...

CVE-2025-31578

CVE-2025-31578 – Fonts Manager | Custom Fonts (WordPress) is a reflected XSS vulnerability due to improper input neutralization during web page generation. Affected product: Fonts Manager | Custom Fonts (Fonts Manager plugin); vulnerable in versions from n/a up to 1.2. The CVE has CVSS v3.1 score...

CVE-2025-21986

creationtimestamp| type| source ---|---|--- 2025-04-01 19:44:20+00:00| seen| https://t.me/cvedetector/21779 2025-05-04 13:18:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14811 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...