DEBIAN-CVE-2025-40230

In the Linux kernel, the following vulnerability has been resolved: mm: prevent poison consumption when splitting THP When performing memory error injection on a THP Transparent Huge Page mapped to userspace on an x86 server, the kernel panics with the following trace. The expected behavior is to...

CVE-2025-40259

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sgfinishremreq calls blkrqunmapuser. The latter function may sleep. Hence, call sgfinishremreq with interrupts enabled instead of disabled...

CVE-2025-40228

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: catch commit test ctx alloc failure Patch series "mm/damon/sysfs: fix commit test damonctx deallocation". DAMON sysfs interface dynamically allocates and uses a damonctx object for testing if given inputs for onli...

CVE-2025-53963

creationtimestamp| type| source ---|---|--- 2025-12-04 15:51:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115662093188710980...

CVE-2025-40216

In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses some weird bit mask logic, get rid of ...

CVE-2025-20389

creationtimestamp| type| source ---|---|--- 2025-12-04 14:50:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m767t3uk6e2b...

CVE-2025-40215

In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x-tunnel as we delete x The ipcomp fallback tunnels currently get deleted from the various lists and hashtables as the last user state that needed that fallback is destroyed not deleted. If a reference to that user...

CVE-2025-14010

creationtimestamp| type| source ---|---|--- 2025-12-04 10:29:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m75rbei6522n...

Exploit for CVE-2025-55182

c...

BELL-CVE-2025-66293

Bulletin has no description...

CVE-2025-43392

creationtimestamp| type| source ---|---|--- 2025-12-04 02:37:54+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3m74wvo4uqb2u...

Exploit for CVE-2025-55182

🔔 ⚠️Unauthorized penetratio...

Linux Distros Unpatched Vulnerability : CVE-2025-40249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: cdev: make sure the cdev fd is still active before emitting events With the final call to fput on a file descriptor, the release action may be deferred an...

CVE-2025-66373

creationtimestamp| type| source ---|---|--- 2025-12-03 23:07:17+00:00| seen| https://bsky.app/profile/geeknik.bsky.social/post/3m74l525ixj2w 2025-12-04 19:03:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m76nxfvi372j 2025-12-14 13:18:27+00:00| seen|...

CVE-2025-50360

creationtimestamp| type| source ---|---|--- 2025-12-03 19:28:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115657284594900242 2025-12-04 03:10:07+00:00| seen| https://bsky.app/profile/blackwiremedia.bsky.social/post/3m74yparw5j2b 2025-12-05 21:02:30+00:00| seen|...

EUVD-2025-200988

A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a RESTRICT segment, a local user may exploit the DYLDINSERTLIBRARIES environment...

EUVD-2025-200991

Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature. The application follows symbolic links placed inside the /Library/Logs/Aquarius directory and treats them as regular files. When building the support ZIP, Aquarius...

EUVD-2025-200990

The Aquarius HelperTool 1.0.003 privileged XPC service on macOS contains multiple flaws that allow local privilege escalation. The service accepts XPC connections from any local process without validating the client's identity, and its authorization logic incorrectly calls AuthorizationCopyRights...

EUVD-2025-200998

An issue was discovered in Camera in Samsung Mobile Processor Exynos 1280 and 2200. Unnecessary registration of a hardware IP address in the Camera device driver can lead to a NULL pointer dereference, resulting in a denial of service...

EUVD-2025-201009

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...