kernel: RDMA/core: Don't expose hw_counters outside of init net namespace

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Don't expose hwcounters outside of init net namespace Commit 467f432a521a "RDMA/core: Split port and device counter sysfs attributes" accidentally almost exposed hw counters to non-init net namespaces. It didn't expose...

kernel: wifi: ath12k: fix uaf in ath12k_core_init()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix uaf in ath12kcoreinit When the execution of ath12kcorehwgroupassign or ath12kcorehwgroupcreate fails, the registered notifier chain is not unregistered properly. Its memory is freed after rmmod, which may trigge...

kernel: net/sched: cls_api: fix error handling causing NULL dereference

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference tcfextsmisscookiebasealloc calls xaalloccyclic which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to...

kernel: wifi: cfg80211: init wiphy_work before allocating rfkill fails

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: init wiphywork before allocating rfkill fails syzbort reported a uninitialize wiphyworklock in cfg80211devfree. 1 After rfkill allocation fails, the wiphy release process will be performed, which will cause...

CVE-2025-12915

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

create-bamboo (>=1.0.1 <=1.0.2) potentially affected by unknown CVE via bamboo-init (=1.0.7)

bamboo-init NPM version =1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on bamboo-init and may be impacted: - create-bamboo =1.0.1, =1.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2025-50934...

Malicious code in bamboo-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913210ebd3bdb67c851e13118eff395e1df72403e313fcedfa4a1e9d4253746b The package bamboo-init was found to contain malicious code...

MAL-2025-50934 Malicious code in bamboo-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913210ebd3bdb67c851e13118eff395e1df72403e313fcedfa4a1e9d4253746b The package bamboo-init was found to contain malicious code...

EUVD-2025-40542

Malicious code in bamboo-init npm...

SUSE-SU-2025:4003-1 Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-15050055121 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2022-50252: igb: Do not free qvector unless new one was allocated bsc1249847...

EUVD-2025-38439

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

SUSE SLES15 Security Update : kernel (Live Patch 4 for SLE 15 SP7) (SUSE-SU-2025:3998-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:3998-1 advisory. This update for the Linux Kernel 6.4.0-1507005316 fixes one issue. The following security issue was fixed: - CVE-2025-38664: ice: Fix a null pointer...

CVE-2025-12915

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

CVE-2025-12915

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

CVE-2025-12915 70mai X200 Init Script file inclusion

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

CVE-2025-12915 70mai X200 Init Script file inclusion

A vulnerability was found in 70mai X200 up to 20251019. This issue affects some unknown processing of the component Init Script Handler. The manipulation results in file inclusion. The attack requires a local approach. A high complexity level is associated with this attack. The exploitability is...

CVE-2025-12915

CVE-2025-12915 – 70mai X200 : Affects versions up to 20251019. The issue stems from the Init Script Handler component, enabling a local file-inclusion flaw. Attack requires local access with high complexity; exploitability is described as difficult. Public exploit exists. Vendor has been contacte...

PT-2025-45572

Name of the Vulnerable Software and Affected Versions 70mai X200 versions up to 20251019 Description A flaw exists in the Init Script Handler component of the software that allows for file inclusion. The attack requires local access and is considered difficult to exploit. The exploit has been...

70mai X200 安全漏洞

70mai X200 is a head-only car recorder from 70mai 70mai, a Chinese company. A security vulnerability exists in 70mai X200 20251019 and earlier versions, which stems from a file inclusion issue in the component Init Script Handler that could lead to a local attack...

SUSE CVE-2025-47151

A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability...