MATLOCK.CA
71Articles
6Categories
2025-12-25Date
🐛
CVE-2025-38393 NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38399 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38401 mtk-sd: Prevent memory corruption from DMA map failure
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38403 vsock/vmci: Clear the vmci transport packet properly when initializing it
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38410 drm/msm: Fix a fence leak in submit error path
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38406 wifi: ath6kl: remove WARN on bad firmware input
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38477 net/sched: sch_qfq: Fix race condition on qfq_aggregate
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38422 net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38425 i2c: tegra: check msg length in SMBUS block read
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38409 drm/msm: Fix another leak in the submit error path
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38395 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38478 comedi: Fix initialization of data for instructions that write to subdevice
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38412 platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38391 usb: typec: altmodes/displayport: do not index invalid pin_assignments
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-38400 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68345 ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68357 iomap: allocate s_dio_done_wq for async reads as well
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68366 nbd: defer config unlock in nbd_genl_connect
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68736 landlock: Fix handling of disconnected directories
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68745 scsi: qla2xxx: Clear cmds after chip reset
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68729 wifi: ath12k: Fix MSDU buffer types handling in RX error path
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68744 bpf: Free special fields when update [lru_,]percpu_hash maps
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68740 ima: Handle error code returned by ima_filter_rule_match()
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68379 RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68346 ALSA: dice: fix buffer overflow in detect_stream_formats()
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68476 KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68615 Net-SNMP snmptrapd crash
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68371 scsi: smartpqi: Fix device resources accessed after device removal
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68349 NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68354 regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68362 wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68741 scsi: qla2xxx: Fix improper freeing of purex item
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68732 gpu: host1x: Fix race in syncpt alloc/free
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2023-54161 af_unix: Fix null-ptr-deref in unix_stream_sendpage().
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68347 ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68344 ALSA: wavefront: Fix integer overflow in sample size validation
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68746 spi: tegra210-quad: Fix timeout handling
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68356 gfs2: Prevent recursive memory reclaim
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68742 bpf: Fix invalid prog->stats access when update_effective_progs fails
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68367 macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68365 fs/ntfs3: Initialize allocated memory before use
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68725 bpf: Do not let BPF test infra emit invalid GSO types to stack
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68728 ntfs3: fix uninit memory after failed mi_read in mi_format_new
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68372 nbd: defer config put in recv_work
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68358 btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2023-54082 af_unix: Fix null-ptr-deref in unix_stream_sendpage().
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68363 bpf: Check skb->transport_header is set in bpf_skb_check_mtu
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68364 ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68727 ntfs3: Fix uninit buffer allocated by __getname()
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68378 bpf: Fix stackmap overflow check in __bpf_get_stackid()
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68376 coresight: ETR: Fix ETR buffer use-after-free issue
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68380 wifi: ath11k: fix peer HE MCS assignment
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68724 crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68374 md: fix rcu protection in md_wakeup_thread
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2025-68733 smack: fix bug: unprivileged task can create labels
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
CVE-2023-54061 x86: fix clear_user_rep_good() exception handling annotation
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability
THEHACKERNEWS.COM — 25 Dec 2025
🐛
CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution
KEVTHEHACKERNEWS.COM — 25 Dec 2025
🐛
CVE-2025-3001 PyTorch torch.lstm_cell memory corruption
MSRC.MICROSOFT.COM — 25 Dec 2025
🐛
Unpatched FortiGate Security Flaw Allows Attackers to Bypass 2FA Controls
GBHACKERS.COM — 25 Dec 2025
⚠️
CERN: how does the international research institution manage risk?
CSOONLINE.COM — 25 Dec 2025
⚠️
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories
THEHACKERNEWS.COM — 25 Dec 2025
⚠️
[webapps] FreeBSD rtsold 15.x - Remote Code Execution via DNSSL
EXPLOIT-DB.COM — 25 Dec 2025
📢
Navigating the Complexities of Privacy and Cybersecurity Evolution
YOUTUBE.COM — 2025-12-25
🔥
LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
THEHACKERNEWS.COM — 25 Dec 2025
🕵️
Building a Hacking Lab in 2025 - PSW #906
YOUTUBE.COM — 2025-12-25
🕵️
Cloudflare Tunnels: No Cloud Server Needed
YOUTUBE.COM — 2025-12-25
📡
Google will finally allow you to change your @gmail.com address
BLEEPINGCOMPUTER.COM — 25 Dec 2025
📡
ChatGPT’s new formatting blocks make its UI look more like a task tool
BLEEPINGCOMPUTER.COM — 25 Dec 2025
📡
[webapps] WordPress Quiz Maker 6.7.0.56 - SQL Injection
EXPLOIT-DB.COM — 25 Dec 2025
📡
[webapps] Chained Quiz 1.3.5 - Unauthenticated Insecure Direct Object Reference via Cookie
EXPLOIT-DB.COM — 25 Dec 2025