DEBIAN-CVE-2025-40331

In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of-bounds write For the following path not holding the sock lock, sctpdiagdump - sctpforeachendpoint - sctpepdump make sure not to exceed bounds in case the address list has grown between buffer allocatio...

CVE-2023-53821

In the Linux kernel, the following vulnerability has been resolved: ip6vti: fix slab-use-after-free in decodesession6 When ipv6vti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when ipv6vti device sen...

CVE-2025-40334

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq buffer virtual address and size It needs to validate the userq object virtual address to determine whether it is residented in a valid vm mapping...

CVE-2025-40331

In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of-bounds write For the following path not holding the sock lock, sctpdiagdump - sctpforeachendpoint - sctpepdump make sure not to exceed bounds in case the address list has grown between buffer allocatio...

CVE-2025-67597

creationtimestamp| type| source ---|---|--- 2025-12-09 16:04:05+00:00| seen| https://gist.github.com/Darkcrai86/239a1262aefc203b5f350fcdd9714488...

CVE-2023-53827

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2capdisconnectreq,rsp Similar to commit d0be8347c623 "Bluetooth: L2CAP: Fix use-after-free caused by l2capchanput", just use l2capchanholdunlesszero to prevent referencing a channel that i...

CVE-2025-63003

creationtimestamp| type| source ---|---|--- 2025-12-09 15:44:36+00:00| seen| https://gist.github.com/Darkcrai86/f975e84dca9bc9cf0df858b258ce1053...

CVE-2025-63064

creationtimestamp| type| source ---|---|--- 2025-12-09 15:27:29+00:00| seen| https://gist.github.com/Darkcrai86/896b72693d92a02418a98e6641745eb3...

CVE-2022-50669

In the Linux kernel, the following vulnerability has been resolved: misc: ocxl: fix possible name leak in ocxlfileregisterafu If deviceregister returns error in ocxlfileregisterafu, the name allocated by devsetname need be freed. As comment of deviceregister says, it should use putdevice to give ...

CVE-2025-40339

No description is available for this CVE. Mitigation To mitigate this issue, prevent the amdgpu module from being loaded if AMD GPU functionality is not required. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module...

CVE-2025-14306

creationtimestamp| type| source ---|---|--- 2025-12-09 11:17:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7kgb5cp2n2n 2026-01-05 17:01:58+00:00| published-proof-of-concept| Telegram/JG0illfmG2L7l4ptINREGxlmvgbv5gaPTQ3AaWMoCQe-I...

CVE-2025-40327

creationtimestamp| type| source ---|---|--- 2025-12-09 08:07:03+00:00| seen| https://gist.github.com/Darkcrai86/37fe805b301e9882d48989d3a9e75434...

CVE-2025-66568

creationtimestamp| type| source ---|---|--- 2025-12-09 07:28:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m7jzihnz362v 2025-12-09 07:33:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/115688447292985606 2025-12-09 07:33:37+00:00| seen|...

CVE-2025-40330

In the Linux kernel, the following vulnerability has been resolved: bnxten: Shutdown FW DMA in bnxtshutdown The netifclose call in bnxtshutdown only stops packet DMA. There may be FW DMA for trace logging recently added that will continue. If we kexec to a new kernel, the DMA will corrupt memory ...

CVE-2025-67504

creationtimestamp| type| source ---|---|--- 2025-12-09 03:38:40+00:00| seen| https://bsky.app/profile/potato.software/post/3m7jmmwjypo22 2025-12-09 04:34:10+00:00| seen| https://infosec.exchange/users/offseq/statuses/115687741812939306 2025-12-09 04:34:12+00:00| seen|...

CVE-2025-42878

creationtimestamp| type| source ---|---|--- 2025-12-09 03:05:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7jkr3fxzs2x 2025-12-09 07:41:45+00:00| seen| https://gist.github.com/Darkcrai86/6c576d578ad0e0082a248502ee6d2a97 2025-12-09 08:09:11+00:00| seen|...

CVE-2023-53783

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fix divide by 0 error in calclcoefs echo max of u64 to cost.model can cause divide by 0 error. echo 8:0 rbps=18446744073709551615 /sys/fs/cgroup/io.cost.model divide error: 0000 1 PREEMPT SMP RIP:...

CVE-2023-53809

In the Linux kernel, the following vulnerability has been resolved: l2tp: Avoid possible recursive deadlock in l2tptunnelregister When a file descriptor of pppol2tp socket is passed as file descriptor of UDP socket, a recursive deadlock occurs in l2tptunnelregister. This situation is reproduced b...

CVE-2013-10031

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks...

CVE-2023-53790

In the Linux kernel, the following vulnerability has been resolved: bpf: Zeroing allocated object from slab in bpf memory allocator Currently the freed element in bpf memory allocator may be immediately reused, for htab map the reuse will reinitialize special fields in map value e.g., bpfspinlock...