vulnerability

A newly assigned Linux kernel vulnerability, tracked as CVE‑2025‑68366, affects the Network Block Device (NBD) driver and stems from a race that can produce a use‑after‑free when handling NBD control messages. The short technical summary is simple: code in nbd_genl_connect increments a...

CVE-2024-7883 is a low-severity but meaningful LLVM/Clang compiler issue that can leak a small slice of a Cortex‑M Secure stack into Non‑secure state via floating‑point registers when certain Arm Cortex‑M Security Extensions (CMSE) calling patterns occur — and while Microsoft’s MSRC has attested...

A subtle but important bug in the Linux kernel’s Netfilter flowtable handling has been assigned CVE-2025-38441 and patched across multiple stable trees after syzbot and KMSAN found a potential access to an uninitialized value in nf_flow_pppoe_proto, caused by a commit that forgot to account for...

A null-pointer dereference bug in the Linux kernel’s ATM “clip” code — tracked as CVE-2025-38458 — has been fixed upstream, and Microsoft’s Security Response Center (MSRC) has published a short product-level attestation saying Azure Linux includes this open‑source library and is therefore...

A critical use‑after‑free vulnerability in the X.Org X server and Xwayland — tracked as CVE‑2025‑62229 — has been published and fixed upstream; the flaw arises in the handling of X11 Present extension notifications and can leave dangling pointers that lead to memory corruption or crashes, with...

Elasticsearch operators need to act now: a newly published vulnerability, tracked as CVE-2025-68384, lets an authenticated low-privileged user trigger uncontrolled resource allocation that can crash Elasticsearch processes (an OOM-based denial-of-service), and vendor updates resolving the issue...

Advantech WebAccess/SCADA operators need to act now: a coordinated advisory published today documents multiple high‑severity vulnerabilities in WebAccess/SCADA that — when chained or exploited individually — can let an authenticated attacker read or modify remote databases, perform path...

The QEMU SR-IOV implementation contains a subtle but meaningful bug: hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a logic error tracked as CVE-2025-54567 that can lead to incorrect registration/unregistration of virtual functions (VFs) and inconsistent...

The Linux kernel has received a targeted, low‑risk hardening to close a race that could lead to a use‑after‑free in a TCP Fast Open helper: CVE‑2025‑68188 updates tcp_fastopen_active_disable_ofo_check to use the RCU‑aware helper dst_dev_rcu, removing a small timing window tied to atomic...

A new Linux kernel CVE has been published that fixes a straightforward—but dangerous—stack buffer overflow in the Realtek staging driver rtl8723bs; the bug allows a malformed wireless Association Request to overflow a 16‑byte stack buffer when parsing the Supported Rates Information Element...

A newly assigned CVE has landed for the Linux kernel that zeroes in on a subtle sysfs ownership-check logic bug: CVE-2025-40355 addresses a condition where the kernel may attempt to change ownership of a sysfs group attribute that is not visible, triggering kernel WARN_ON traces and possible...

A recently disclosed Linux kernel vulnerability, tracked as CVE-2025-40331, closes a small but significant TOCTOU (time‑of‑check/time‑of‑use) window in the kernel’s SCTP diagnostic path to prevent an out‑of‑bounds write that can crash or destabilize affected systems. The fix is localized to...

A heap-based buffer overflow has been publicly disclosed in HDF5 1.14.6 — tracked as CVE-2025-6818 — rooted in the H5O__chunk_protect routine inside src/H5Ochunk.c, creating a locally exploitable crash and potential memory‑corruption vector that defenders must treat seriously in any environment...

A heap‑buffer overflow in HDF5’s heap-list deserialization routine — H5HL__fl_deserialize in src/H5HLcache.c — was disclosed in March 2025 as CVE‑2025‑2924; the flaw can cause out‑of‑bounds reads and heap corruption when the library processes crafted .h5 files, a proof‑of‑concept was published...

Microsoft has quietly rewritten the rules of engagement for vulnerability research: starting now, any critical flaw that demonstrably impacts Microsoft’s online services is eligible for a bounty — even if the vulnerable code lives in third‑party software or open‑source libraries, and even if no...

A newly disclosed vulnerability in GNOME’s HTTP library libsoup — tracked as CVE-2025-14523 — exposes a subtle but powerful mismatch in how duplicate Host headers are handled, creating a practical vector for virtual-host confusion, cache poisoning, and request‑smuggling–style bypasses when...

A newly assigned vulnerability, CVE‑2025‑14087, affects GLib’s GVariant text parser and can lead to heap corruption when processing specially crafted strings; the flaw stems from signed‑integer counters that can overflow and cause writes before the start of an allocated buffer, yielding crashes...

A newly disclosed use‑after‑free bug in the GRUB2 bootloader — tracked as CVE‑2025‑61663 — arises from a missing unregister call in the normal command module and can cause a local attacker who can invoke GRUB commands to crash the bootloader or the host, prompting immediate patching from...

A serious integer‑overflow bug in the X.Org X server’s Record extension (tracked as CVE-2025-49179) can be abused by a local client to bypass request length checks and force a denial‑of‑service against Xwayland/TigerVNC‑backed sessions, and vendors including Debian and Red Hat have published...

CISA has added a GeoServer XML External Entity (XXE) flaw — tracked as CVE-2025-58360 — to its Known Exploited Vulnerabilities (KEV) catalog, elevating the bug from a vendor patch notice to an operational priority for federal agencies and an urgent remediation signal for the wider community...