CVE-2022-49908

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix memory leak in vhciwrite Syzkaller reports a memory leak as follows: ==================================== BUG: memory leak unreferenced object 0xffff88810d81ac00 size 240: ... hex dump first 32 bytes: 00 00 ...

CVE-2022-49804

In the Linux kernel, the following vulnerability has been resolved: s390: avoid using global register for currentstackpointer Commit 30de14b1884b "s390: currentstackpointer shouldn't be a function" made currentstackpointer a global register variable like on many other architectures. Unfortunately...

CVE-2022-49784

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/uncore: Fix memory leak for events array When a CPU comes online, the per-CPU NB and LLC uncore contexts are freed but not the events array within the context structure. This causes a memory leak as identified by the...

CVE-2025-23150

In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in dosplit Syzkaller detected a use-after-free issue in ext4insertdentry that was caused by out-of-bounds access due to incorrect splitting in dosplit. BUG: KASAN: use-after-free in...

CVE-2022-49796

In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on tracearray in kprobeeventgentestexit When testgenkprobecmd failed after kprobeeventgencmdend, it will goto delete, which will call kprobeeventdelete and release the corresponding...

CVE-2025-37763

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: take paired job reference For paired jobs, have the fragment job take a reference on the geometry job, so that the geometry job cannot be freed until the fragment job has finished with it. The geometry job...

CVE-2022-49882

In the Linux kernel, the following vulnerability has been resolved: KVM: Reject attempts to consume or refresh inactive gfntopfncache Reject kvmgpccheck and kvmgpcrefresh if the cache is inactive. Not checking the active flag during refresh is particularly egregious, as KVM can end up with a vali...

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to a security information disclosure in VMware Tanzu Spring [CVE-2024-38819]

Summary IBM Watson Speech Services Cartridge is vulnerable to a security information disclosure in VMware Tanzu Spring, due to path traversal exposures through the functional web framework: WebMvc.fn or WebFlux.fn CVE-2024-38819. VMware Tanzu Spring is used in our Speech microservices. This...

CVE-2025-37750

creationtimestamp| type| source ---|---|--- 2025-05-01 13:55:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo4hls26jr2p 2025-05-01 16:30:19+00:00| seen| https://t.me/cvedetector/24223 2026-06-29 17:13:37+00:00| seen|...

CVE-2025-46342

creationtimestamp| type| source ---|---|--- 2025-04-30 15:48:38+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114427698692598891 2025-04-30 15:59:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114427741773438031 2025-04-30 16:30:35+00:00| seen|...

Security Bulletin: IBM Security Verify Information Queue does not sufficiently safeguard session IDs from session fixation attacks (CVE-2021-20411)

Summary The web server in IBM Security Verify Information Queue ISIQ does not always update the session identifier when a new user logs in. This could allow a session fixation attack in which a previously used session identifier gets commandeered by an impersonator. As of v10.0.0, ISIQ now...

CVE-2025-43965

creationtimestamp| type| source ---|---|--- 2025-04-23 15:04:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13050 2025-04-23 17:19:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnipapz3qq2r 2025-04-23 18:39:46+00:00| seen| https://t.me/cvedetector/23592 2026-02-04...

CVE-2025-1731

creationtimestamp| type| source ---|---|--- 2025-04-22 03:02:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12791 2025-04-22 05:00:32+00:00| seen| Telegram/z3hrnS4sCgLCaWMA7rI3OA9UpXy1hGKImXcclK-WChPDY5I 2025-04-22 05:51:42+00:00| seen| https://t.me/cvedetector/23478 2025-04-22...

CGA-8HM4-F7P2-R3RF

Bulletin has no description...

CVE-2025-28231

creationtimestamp| type| source ---|---|--- 2025-04-18 17:59:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12514 2025-04-18 19:35:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4dk6zboru2 2025-04-18...

CGA-5M3V-2CQM-5GHM

Bulletin has no description...

CGA-PXP8-H5Q6-54C4

Bulletin has no description...

CVE-2025-22122

In the Linux kernel, the following vulnerability has been resolved: block: fix adding folio to bio 4GB folio is possible on some ARCHs, such as aarch64, 16GB hugepage is supported, then 'offset' of folio can't be held in 'unsigned int', cause warning in bioaddfolionofail and IO failure. Fix it by...

CERTFR-2025-CTI-005

creationtimestamp| type| source ---|---|--- 2025-04-17 09:27:53+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114352591453852456...

CVE-2025-32856

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxaptslt22a 2025-04-16 20:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605608981550 2025-04-16 21:55:10+00:00| seen|...