CVE-2025-24828 – Acronis Cyber Protect Cloud Agent DLL Hijacking Vulnerability
The following table lists the changes that have been made to the CVE-2025-24828 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Jan. 31, 2025 Action […]
CVE-2025-24827 – Acronis Cyber Protect Cloud Agent DLL Hijacking Vulnerability
The following table lists the changes that have been made to the CVE-2025-24827 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0 Jan. 31, 2025 Action Type […]
CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors
CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors Vulnerability / Healthcare The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Food and Drug Administration (FDA) have issued alerts about the presence of hidden functionality in … Read more Published Date: Jan 31, 2025 (4 hours, 36 minutes ago) Vulnerabilities has been mentioned […]
VMware Aria Vulnerabilities Addressed
VMware Aria Vulnerabilities Addressed VMware Security Advisory VMSA-2025-0003 addresses multiple vulnerabilities identified in VMware Aria Operations for Logs and VMware Aria Operations. These vulnerabilities, if exploited, could allow at … Read more Published Date: Jan 31, 2025 (3 hours, 20 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-22222 CVE-2025-22221 CVE-2025-22220 CVE-2025-22219 CVE-2025-22218 CVE-2025-24085 CVE-2024-55591
CVE-2025-21680 – “QEMU Pktgen Array Out-of-Bounds Write Vulnerability”
The following table lists the changes that have been made to the CVE-2025-21680 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 31, 2025 Action […]
CVE-2025-21679 – Linux Kernel Btrfs Null Pointer Dereference
The following table lists the changes that have been made to the CVE-2025-21679 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jan. 31, 2025 Action […]
CVE-2025-21683 – Linux Kernel bpf SO_ATTACH_REUSEPORT_EBPF Memory Leak Vulnerability
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_sk_select_reuseport() memory leak As pointed out in the original comment, lookup in sockmap can return a TCP ESTABLISHED socket. Such TCP socket may have had SO_ATTACH_REUSEPORT_EBPF set before it was ESTABLISHED. In other words, a non-NULL sk_reuseport_cb does not imply a non-refcounted socket. […]
CVE-2025-21682 – “Broadcom bnxt: Null-dereference Vulnerability in XDP Handling”
In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when XDP is detached. Before: # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp # ip li set dev eth0 xdp off # ethtool -k eth0 | grep gro rx-gro-hw: off […]
CVE-2025-21681 – Openvswitch Lockup Vulnerability
In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix lockup on tx to unregistering netdev with carrier Commit in a fixes tag attempted to fix the issue in the following sequence of calls: do_output -> ovs_vport_send -> dev_queue_xmit -> __dev_queue_xmit -> netdev_core_pick_tx -> skb_tx_hash When device is unregistering, the ‘dev->real_num_tx_queues’ goes to […]
CVE-2025-21678 – “Linux GTP Net Namespace Device Destruction Vulnerability”
In the Linux kernel, the following vulnerability has been resolved: gtp: Destroy device along with udp socket’s netns dismantle. gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created. Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat […]