83141 matches found
UBUNTU-CVE-2025-38227
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Terminating the subsequent process of initialization failure syzbot reported a slab-use-after-free Read in vidtvmuxinit. 1 After PSI initialization fails, the si member is accessed again, resulting in this uaf. Afte...
UBUNTU-CVE-2025-38210
In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsmops Unlike sysfs, the lifetime of configfs objects is controlled by userspace. There is no mechanism for the kernel to find and delete all created config-items. Instead, the...
CVE-2025-38226 media: vivid: Change the siize of the composing
In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the composing syzkaller found a bug: BUG: KASAN: vmalloc-out-of-bounds in tpgfillplanepattern drivers/media/common/v4l2-tpg/v4l2-tpg-core.c:2608 inline BUG: KASAN: vmalloc-out-of-bounds in...
CVE-2025-38224 can: kvaser_pciefd: refine error prone echo_skb_max handling logic
In the Linux kernel, the following vulnerability has been resolved: can: kvaserpciefd: refine error prone echoskbmax handling logic echoskbmax should define the supported upper limit of echoskb allocated inside the netdevice's priv. The corresponding size value provided by this driver to...
CVE-2025-38224
CVE-2025-38224 concerns the Linux kernel’s can: kvaser_pciefd driver where echo_skb_max was defined as 17 (KVASER_PCIEFD_CAN_TX_MAX_COUNT) but later rounded to the next power of two (32). This caused potential slab-out-of-bounds in kvaser_pciefd_handle_ack_packet() when computing tx/rx indices, l...
CVE-2025-38213
CVE-2025-38213 is rejected by the CNA and does not represent an active vulnerability entry.
CVE-2025-38210 configfs-tsm-report: Fix NULL dereference of tsm_ops
In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsmops Unlike sysfs, the lifetime of configfs objects is controlled by userspace. There is no mechanism for the kernel to find and delete all created config-items. Instead, the...
CVE-2025-38210 configfs-tsm-report: Fix NULL dereference of tsm_ops
In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsmops Unlike sysfs, the lifetime of configfs objects is controlled by userspace. There is no mechanism for the kernel to find and delete all created config-items. Instead, the...
CVE-2025-38207 mm: fix uprobe pte be overwritten when expanding vma
In the Linux kernel, the following vulnerability has been resolved: mm: fix uprobe pte be overwritten when expanding vma Patch series "Fix uprobe pte be overwritten when expanding vma". This patch of 4: We encountered a BUG alert triggered by Syzkaller as follows: BUG: Bad rss-counter state...
CVE-2025-38179
Technical details about CVE-2025-38179 (affected product/component, root cause, impact, exploitability, or patch information) are not publicly provided in the connected documents. Monitor for updates.
CVE-2025-4414
creationtimestamp| type| source ---|---|--- 2025-07-04 13:03:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt5cjppfhb2p...
CVE-2025-28968
creationtimestamp| type| source ---|---|--- 2025-07-04 12:36:27+00:00| seen| https://bsky.app/profile/potato.software/post/3lt5az3r2vh2s...
CVE-2025-38176
In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfsevictinode Running 'stress-ng --binderfs 16 --timeout 300' under KASAN-enabled kernel, I've noticed the following: BUG: KASAN: slab-use-after-free in binderfsevictinode+0x1de/0x2d0 Write of...
CVE-2024-3366
creationtimestamp| type| source ---|---|--- 2025-07-04 11:01:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114794620052697504...
MAL-2025-6521 Malicious code in hellotesthim (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a7a4369b02deb0d2a9cf1340be0efe760e29f7979e3f7361ba029a282b70597f Series of packages mostly with an obfuscated infostealer attempting to collect Chrome data. While discord webhook is usually set to an example, there are other...
CVE-2025-30947
creationtimestamp| type| source ---|---|--- 2025-07-04 09:55:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4xz6tyzr2o...
CVE-2025-28967
creationtimestamp| type| source ---|---|--- 2025-07-04 09:46:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4xiktfc22a 2025-08-06 13:54:19+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:21+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448...
CVE-2025-32918
creationtimestamp| type| source ---|---|--- 2025-07-04 08:44:34+00:00| seen| https://bsky.app/profile/potato.software/post/3lt4u2hbqlj2v 2025-07-04 09:15:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4vrn2w4b2s...