CVE-2022-49984 HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report

In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steamrecv,sendreport It is possible for a malicious device to forgo submitting a Feature Report. The HID Steam driver presently makes no prevision for this and de-references the...

CVE-2022-49970 bpf, cgroup: Fix kernel BUG in purge_effective_progs

In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix kernel BUG in purgeeffectiveprogs Syzkaller reported a triggered kernel BUG as follows: ------------ cut here ------------ kernel BUG at kernel/bpf/cgroup.c:925! invalid opcode: 0000 1 PREEMPT SMP NOPTI CPU: 1 PI...

CVE-2022-49954

The CVE-2022-49954 issue concerns the Linux kernel and a race where, after clearing IFORCE_XMIT_RUNNING, wake_up was not invoked, causing a hung task in input handling (hang at __input_unregister_device() during iforce_close and input_disconnect_device()). The root cause per the provided descript...

CVE-2025-38065

creationtimestamp| type| source ---|---|--- 2025-06-18 10:40:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18716 2025-06-18 12:22:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lruys2yfny25...

CVE-2025-38078

creationtimestamp| type| source ---|---|--- 2025-06-18 10:40:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18703 2025-06-18 11:40:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lruwgzesoc2u...

CVE-2025-38056

creationtimestamp| type| source ---|---|--- 2025-06-18 10:23:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114703871771189256...

CVE-2025-38040

In the Linux kernel, the following vulnerability has been resolved: serial: mctrlgpio: split disablems into sync and nosync APIs The following splat has been observed on a SAMA5D27 platform using atmelserial: BUG: sleeping function called from invalid context at kernel/irq/manage.c:738 inatomic: ...

CVE-2025-38016

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: abort dispatch if device destroyed The current HID bpf implementation assumes no output report/request will go through it after hidbpfdestroydevice has been called. This leads to a bug that unplugging certain types of H...

CVE-2025-5237

creationtimestamp| type| source ---|---|--- 2025-06-18 09:39:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18696 2025-06-18 11:51:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lruwzvkxzn2k...

CVE-2025-38050 mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios A kernel crash was observed when replacing free hugetlb folios: BUG: kernel NULL pointer dereference, address: 0000000000000028 PGD 0 P4D 0 Oops:...

Veeam Patches CVE-2025-23121: Critical RCE Bug Rated 9.9 CVSS in Backup & Replication

Veeam has rolled out patches to contain a critical security flaw impacting its Backup & Replication software that could result in remote code execution under certain conditions. The security defect, tracked as CVE-2025-23121, carries a CVSS score of 9.9 out of a maximum of 10.0. "A vulnerability...

PT-2025-26134 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak was found in the Linux kernel, specifically in the meson-secure-pwrc.c file. The issue occurs in the meson secure pwrc probe function, where there is a refcount leak in...

PT-2025-25883

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the kcm module. The issue involved the incorrect ordering of the strp init function call, which led to unnecessary...

PT-2025-26096

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the kunit: executor component. The problem occurs when memory allocation for 'filtered' fails, but the copy o...

PT-2025-25920 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the bootmem and kmemleak components. Specifically, the vmemmap pages are marked by kmemleak when allocate...

PT-2025-25896 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A kernel BUG has been resolved in the Linux kernel, specifically in the bpf and cgroup components. The issue was reported by Syzkaller and occurs when a kernel BUG is triggered due...

Stable Channel ChromeOS Update

The ChromeOS Stable channel is being updated to OS version 16267.51.0 Browser version 137.0.7151.123 for most ChromeOS devices. If you find new issues, please let us know one of the following ways: 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta...

CVE-2025-37780

creationtimestamp| type| source ---|---|--- 2025-06-17 21:38:25+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrtheiu25s2v...

CVE-2025-31698

creationtimestamp| type| source ---|---|--- 2025-06-17 19:26:35+00:00| seen| https://seclists.org/oss-sec/2025/q2/264 2025-06-20 14:43:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18973...

CVE-2025-6191

creationtimestamp| type| source ---|---|--- 2025-06-17 19:21:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114700324946397753 2025-06-18 00:58:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lrtskls3hz26 2025-06-18 03:23:51+00:00| seen|...