kernel: wifi: mt76: fix linked list corruption

A flaw was found in the linux kernal wifi subsystem mt76txqschedulependingwcid and mt76txqschedulepending functions of the mt76 driver. Under certain conditions, scheduled wcid entries are left on a temporary on‑stack list, which may lead to linked‑list corruption and memory corruption, allowing ...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

kernel: wifi: mt76: fix linked list corruption

A flaw was found in the linux kernal wifi subsystem mt76txqschedulependingwcid and mt76txqschedulepending functions of the mt76 driver. Under certain conditions, scheduled wcid entries are left on a temporary on‑stack list, which may lead to linked‑list corruption and memory corruption, allowing ...

kernel: wifi: mt76: fix linked list corruption

A flaw was found in the linux kernal wifi subsystem mt76txqschedulependingwcid and mt76txqschedulepending functions of the mt76 driver. Under certain conditions, scheduled wcid entries are left on a temporary on‑stack list, which may lead to linked‑list corruption and memory corruption, allowing ...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nfsd: handle getclientlocked failure in nfsd4setclientidconfirm CVE-2025-38724 kernel: wifi: cfg80211: fix use-after-free in cmpbss CVE-2025-39864 kernel: e1000e: fix heap overflow in...

CVE-2025-8890

creationtimestamp| type| source ---|---|--- 2025-11-27 15:28:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6moorbxdg2s 2025-11-28 01:04:23+00:00| seen| https://infosec.exchange/users/offseq/statuses/115624631470875781 2025-11-28 01:04:26+00:00| seen|...

CVE-2025-60914

creationtimestamp| type| source ---|---|--- 2025-11-24 17:53:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ffeqdlpb2u...

China-Linked APT31 Launches Stealthy Cyberattacks on Russian IT Using Cloud Services

The China-linked advanced persistent threat APT group known as APT31 has been attributed to cyber attacks targeting the Russian information technology IT sector between 2024 and 2025 while staying undetected for extended periods of time. "In the period from 2024 to 2025, the Russian IT sector,...

CVE-2025-59245

creationtimestamp| type| source ---|---|--- 2025-11-20 22:44:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115584444564008370 2025-11-20 23:25:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m63w3zlo3z2q 2025-11-21 01:33:17+00:00| seen|...

MAL-2025-190588 Malicious code in @ra-ftds/ra-flourish-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72b65d4ce1abb0b35aca62b21968c19b6e8e99ec60962be31a4179ba5f22bec The package @ra-ftds/ra-flourish-design-tokens was found to contain malicious code. Source: ossf-package-analysis...

Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt

Threat actors with ties to Iran engaged in cyber warfare as part of efforts to facilitate and enhance physical, real-world attacks, a trend that Amazon has called cyber-enabled kinetic targeting. The development is a sign that the lines between state-sponsored cyber attacks and kinetic warfare ar...

CVE-2025-6599

creationtimestamp| type| source ---|---|--- 2025-11-18 05:33:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5uzbejczc2n...

GHSA-MH29-5H37-FV8M

creationtimestamp| type| source ---|---|--- 2025-11-13 15:55:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115543200501188755 2025-12-02 03:16:32+00:00| seen| https://gist.github.com/deepak-chowdry/3da737fb0b4c63ed1bfe586c677e4860 2025-12-16 19:59:00+00:00| seen|...

Malicious code in teagood-sukuna47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d35076ac7bcad8a0e3f651ddf2fea4c234aa70577c3c4fffd071bd241b56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124973

Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used backgrou...

CVE-2025-64404

Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of Apache OpenOffice, documents that used backgrou...

CVE-2025-64473

creationtimestamp| type| source ---|---|--- 2025-11-06 06:45:50+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4wxo4d7gqd2 2025-11-06 07:47:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4x35jpwfy2n...

CVE-2025-63601

creationtimestamp| type| source ---|---|--- 2025-11-05 17:43:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4vlxutnoa26 2025-11-06 08:38:58+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3m4x5zgpzkk2p...

MAL-2025-49364 Malicious code in supply_chain_supplyer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb82b4b36d6e82b7dff16e757aab9bf7ffce58bcd579bd38ad7cdd98da4c3e5 The package supplychainsupplyer was found to contain malicious code. Source: ossf-package-analysis...