Linux Distros Unpatched Vulnerability : CVE-2025-39698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iouring/futex: ensure iofutexwait cleans up properly on failure The iofutexdata is allocated upfront and assigned to the iokiocb asyncdata field, but the reques...

PT-2025-36447

CVE-2025-58909 - OpenVAS Scanner Not Used CVE ID : CVE-2025-58909 Published : Sept. 6, 2025, 3:15 a.m. | 3 hours, 53 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Atlantis Exposes Service Version Publicly on /status API Endpoint

Summary Atlantis publicly exposes detailed version information on its /status endpoint. This information disclosure could allow attackers to identify and target known vulnerabilities associated with the specific versions, potentially compromising the service's security posture. Details The /statu...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the /status endpoint, which returns detailed version and build information. An attacker can gain insights into the software version and configuration by sending unauthenticated requests to this endpoint and...

GHSA-XH7V-965R-23F7 Atlantis Exposes Service Version Publicly on /status API Endpoint

Summary Atlantis publicly exposes detailed version information on its /status endpoint. This information disclosure could allow attackers to identify and target known vulnerabilities associated with the specific versions, potentially compromising the service's security posture. Details The /statu...

Security update for cloud-init

This update for cloud-init fixes the following issues: Update to version 25.1.3: CVE-2024-6174: Unpriveleged user could trigger hotplug-hook commands bsc1245403. None security fixes: Rebase cloud-init to 24.4 or higher bsc1239715, jscPED-8680. Fixed cloud-init --debug status bsc1228414. Using...

CVE-2025-55037

creationtimestamp| type| source ---|---|--- 2025-09-05 08:06:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ly37bioixh2e...

PT-2025-36399

Name of the Vulnerable Software and Affected Versions Atlantis affected versions not specified Description Atlantis, a self-hosted golang application that listens for Terraform pull request events via webhooks, exposes detailed version information through the /status endpoint. This information...

PT-2025-36640

Summary Atlantis publicly exposes detailed version information on its /status endpoint. This information disclosure could allow attackers to identify and target known vulnerabilities associated with the specific versions, potentially compromising the service's security posture. Details The /statu...

SUSE CVE-2025-38689

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix NULL dereference in avx512status Problem ------- With CONFIGX86DEBUGFPU enabled, reading /proc/kthread/archstatus causes a warning and a NULL pointer dereference. This is because the AVX-512 timestamp code uses...

CVE-2025-38721

creationtimestamp| type| source ---|---|--- 2025-09-04 19:17:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxzucza2mu2z 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10 2026-07-28 16:19:20+00:00| seen|...

CVE-2025-38724

creationtimestamp| type| source ---|---|--- 2025-09-04 19:12:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxzu2ffw332z 2025-10-08 10:10:34+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m2ofmma5jr2o 2025-10-08 10:10:35+00:00| seen|...

CVE-2025-38680

creationtimestamp| type| source ---|---|--- 2025-09-04 16:54:55+00:00| seen| https://gist.github.com/Darkcrai86/50ac7d50e1e981d9612cfb6d8727f458 2026-01-08 23:06:12+00:00| published-proof-of-concept| Telegram/n46f-SNrEX1cfeqCoigfhmzJcsgQMSCn13PgXpjR2j0r24 2026-05-14 10:00:00+00:00| seen|...

CVE-2025-38694

creationtimestamp| type| source ---|---|--- 2025-09-04 16:52:51+00:00| seen| https://gist.github.com/Darkcrai86/605e38a41ea5de3d06f4c0f5d232153a 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2025-38689

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix NULL dereference in avx512status Problem ------- With CONFIGX86DEBUGFPU enabled, reading /proc/kthread/archstatus causes a warning and a NULL pointer dereference. This is because the AVX-512 timestamp code uses...

UBUNTU-CVE-2025-38689

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix NULL dereference in avx512status Problem ------- With CONFIGX86DEBUGFPU enabled, reading /proc/kthread/archstatus causes a warning and a NULL pointer dereference. This is because the AVX-512 timestamp code uses...

CVE-2025-38689 x86/fpu: Fix NULL dereference in avx512_status()

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix NULL dereference in avx512status Problem ------- With CONFIGX86DEBUGFPU enabled, reading /proc/kthread/archstatus causes a warning and a NULL pointer dereference. This is because the AVX-512 timestamp code uses...

CVE-2025-38689 x86/fpu: Fix NULL dereference in avx512_status()

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix NULL dereference in avx512status Problem ------- With CONFIGX86DEBUGFPU enabled, reading /proc/kthread/archstatus causes a warning and a NULL pointer dereference. This is because the AVX-512 timestamp code uses...

CVE-2025-6785

creationtimestamp| type| source ---|---|--- 2025-09-04 15:14:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxzgqqgr5y2d...

CVE-2025-2417

creationtimestamp| type| source ---|---|--- 2025-09-04 13:20:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxzae7jwjx2f 2026-05-23 09:00:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mmj3kz4gmp2f...