USN-7406-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Network namespace; - Networking core; CVE-2024-26928, CVE-2024-56658,...

CVE-2024-50594

creationtimestamp| type| source ---|---|--- 2025-04-02 14:00:22+00:00| seen| https://infosec.place/objects/0ac53b9b-a988-4381-a754-afe76a375871 2025-04-02 14:00:22+00:00| seen| https://infosec.place/objects/0ac53b9b-a988-4381-a754-afe76a375871 2025-04-02 17:02:00+00:00| seen|...

CVE-2025-31477

creationtimestamp| type| source ---|---|--- 2025-04-02 09:40:52+00:00| published-proof-of-concept| https://github.com/tauri-apps/plugins-workspace/security/advisories/GHSA-c9pr-q8gx-3mgp 2025-04-02 21:34:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10143 2025-04-02...

CVE-2025-3063

creationtimestamp| type| source ---|---|--- 2025-04-02 09:34:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10039 2025-04-02 11:48:14+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114268208738829564 2025-04-02 11:48:14+00:00| seen|...

CVE-2024-45699

creationtimestamp| type| source ---|---|--- 2025-04-02 06:34:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10033 2025-04-02 09:01:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llsznb6itr2l 2025-04-02 10:48:19+00:00| seen| https://t.me/cvedetector/21846 2025-04-02...

CVE-2025-31619

creationtimestamp| type| source ---|---|--- 2025-04-01 22:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llrxug4tzb2l 2025-04-01 23:48:44+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114265379557389873 2025-04-01 23:48:44+00:00| seen|...

CVE-2023-46988

creationtimestamp| type| source ---|---|--- 2025-04-01 22:21:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114265037010819061 2025-04-01 22:21:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114265037010819061 2025-04-01 22:32:46+00:00| published-proof-of-concept|...

CVE-2025-31552

creationtimestamp| type| source ---|---|--- 2025-04-01 21:40:33+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llrtlhfglo22 2025-04-01 23:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114265379192709158 2025-04-01 23:48:41+00:00| seen|...

CVE-2025-31534

creationtimestamp| type| source ---|---|--- 2025-04-01 21:40:30+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llrtleuvb722 2025-04-01 23:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114265379121005167 2025-04-01 23:48:39+00:00| seen|...

CVE-2025-31161

creationtimestamp| type| source ---|---|--- 2025-04-01 13:41:11+00:00| exploited| https://t.me/informationsecuritychannel/53322 2025-04-02 18:27:07+00:00| seen| https://bsky.app/profile/theitnerd.bsky.social/post/3lltzaeredv2p 2025-04-03 03:53:25+00:00| seen|...

CVE-2025-2237

creationtimestamp| type| source ---|---|--- 2025-04-01 11:34:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9872 2025-04-01 12:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llqvfgouaa2v 2025-04-01 13:48:33+00:00| seen|...

CVE-2025-30911

creationtimestamp| type| source ---|---|--- 2025-04-01 06:32:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9855 2025-04-01 06:40:26+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llqbbxlaxu2g 2025-04-01 07:48:34+00:00| seen|...

CVE-2025-31184

This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may gain unauthorized access to Local Network...

CVE-2025-30447

The issue was resolved by sanitizing logging This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data...

CVE-2025-30454

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. A malicious app may be able to access private information...

CVE-2025-30438

This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to dismiss the system notification on the Lock Screen that a recording w...

CVE-2025-30429

A path handling issue was addressed with improved validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox...

DEBIAN-CVE-2025-30427

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-24230

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Playing a malicious audio file may lead to an unexpected app terminatio...

DEBIAN-CVE-2025-24213

This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A type confusion issue could lead to memory corruption...