CVE-2025-2715

creationtimestamp| type| source ---|---|--- 2025-03-12 13:43:42+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lk6pmd3g2s2y 2025-03-24 23:23:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8568 2025-03-25 02:46:15+00:00| seen|...

CVE-2025-21845

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: sst: Fix SST write failure 'commit 18bcb4aa54ea "mtd: spi-nor: sst: Factor out common write operation to sstnorwritedata"' introduced a bug where only one byte of data is written, regardless of the number of bytes...

CVE-2025-21856

In the Linux kernel, the following vulnerability has been resolved: s390/ism: add release function for struct device According to devicerelease in /drivers/base/core.c, a device without a release function is a broken device and must be fixed. The current code directly frees the device after calli...

CVE-2025-21857

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: fix error handling causing NULL dereference tcfextsmisscookiebasealloc calls xaalloccyclic which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to...

CVE-2025-21849

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Use spinlockirqsave in interruptible context spinlock/unlock functions used in interrupt contexts could result in a deadlock, as seen in GitLab issue 13399, which occurs when interrupt comes in while holding a lock...

CVE-2025-21861

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: don't add folio to be freed to LRU in migratedevicefinalize If migration succeeded, we called foliomigrateflags-memcgroupmigrate to migrate the memcg from the old to the new folio. This will set memcgdata of the...

CVE-2025-21852

In the Linux kernel, the following vulnerability has been resolved: net: Add rxskb of kfreeskb to rawtpnullargs. Yan Zhai reported a BPF prog could trigger a null-ptr-deref 0 in tracekfreeskb if the prog does not check if rxsk is NULL. Commit c53795d48ee8 "net: add rxsk to tracekfreeskb" added rx...

CVE-2024-58089

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double accounting race when btrfsrundelallocrange failed BUG When running btrfs with block size 4K smaller than page size 64K, aarch64, there is a very high chance to crash the kernel at generic/750, with the following...

CVE-2025-21864

In the Linux kernel, the following vulnerability has been resolved: tcp: drop secpath at the same time as we currently drop dst Xiumei reported hitting the WARN in xfrm6tunnelnetexit while running tests that boil down to: - create a pair of netns - run a basic TCP test over ipcomp6 - delete the...

CVE-2025-21847

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sofipcmsgdata The nullity of sps-cstream should be checked similarly as it is done in sofsetstreamdataoffset function. Assuming that it is not NULL if sps-stream is NULL is...

CVE-2025-21855

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Don't reference skb after sending to VIOS Previously, after successfully flushing the xmit buffer to VIOS, the txbytes stat was incremented by the length of the skb. It is invalid to access the skb memory after sending t...

CVE-2024-58087

creationtimestamp| type| source ---|---|--- 2025-03-12 07:43:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7288 2025-03-13 17:48:21+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114156378535995607 2025-05-04 11:19:02+00:00| published-proof-of-concept|...

CVE-2025-24431

creationtimestamp| type| source ---|---|--- 2025-03-12 04:43:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7273 2025-03-13 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-134/...

CVE-2025-1622

creationtimestamp| type| source ---|---|--- 2025-03-12 03:44:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7265 2025-03-16 06:46:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7702 2025-03-16 08:00:58+00:00| seen| https://t.me/cvedetector/20406...

CVE-2025-28915

creationtimestamp| type| source ---|---|--- 2025-03-11 22:40:20+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lk5552pcq62n 2025-03-12 10:00:05+00:00| published-proof-of-concept| Telegram/YXXAYpim7CTBciEsZ274r31Y5zZFEUA-ADCgFk7JYE3PFkE 2025-03-12 11:00:08+00:00| seen|...

Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for March of 2025 which includes 57 vulnerabilities affecting a range of products, including 6 that Microsoft marked as "critical". There are six vulnerabilities that Microsoft has observed being exploited in the wild. CVE-2025-26633 is a Remoted...

CVE-2025-23242

creationtimestamp| type| source ---|---|--- 2025-03-11 20:41:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7244 2025-03-13 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-145/ 2025-03-18 06:10:41+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3lkmz3uldyq2...

Patch Tuesday - March 2025

Microsoft is addressing 57 vulnerabilities this March 2025 Patch Tuesday, which is a similar volume to last month. However, Microsoft has evidence of in-the-wild exploitation for as many as six of the vulnerabilities published today, and CISA KEV already lists all of them. Microsoft is also aware...

Patch Tuesday - March 2025

Microsoft is addressing 57 vulnerabilities this March 2025 Patch Tuesday, which is a similar volume to last month. However, Microsoft has evidence of in-the-wild exploitation for as many as six of the vulnerabilities published today, and CISA KEV already lists all of them. Microsoft is also aware...

CVE-2025-27773

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to...