Aggregator

CVE-2025-22056 | Linux Kernel up to 6.14.1 nft_tunnel out-of-bounds write (Nessus ID 234884 / WID-SEC-2025-0844)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in Linux Kernel up to 6.14.1. It has been classified as critical. Affected by this issue is some unknown functionality of the component nft_tunnel. Performing manipulation results in out-of-bounds write. This vulnerability was named CVE-2025-22056. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

CVE-2025-22054 | Linux Kernel up to 6.14.1 com20020pci_probe null pointer dereference (Nessus ID 234884 / WID-SEC-2025-0844)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in Linux Kernel up to 6.14.1. It has been rated as critical. Impacted is the function com20020pci_probe. The manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2025-22054. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is advised.
vuldb.com

Qilin

Dark Feed IO
8 months 3 weeks ago

You must login to view this content

cohenido

Qilin

Dark Feed IO
8 months 3 weeks ago

You must login to view this content

cohenido

CVE-2025-37834 | Linux Kernel up to 6.12.25/6.14.4 vmscan me_swapcache_dirty reference count (Nessus ID 240657 / WID-SEC-2025-0975)

Vuldb Updates
8 months 3 weeks ago
A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.25/6.14.4. Affected is the function me_swapcache_dirty of the component vmscan. The manipulation results in improper update of reference count. This vulnerability is known as CVE-2025-37834. Access to the local network is required for this attack. No exploit is available. The affected component should be upgraded.
vuldb.com

CVE-2025-37833 | Linux Kernel up to e6454fd429b0ba6513ac1de27a0bd6ccac021a40 niu_try_msix denial of service (Nessus ID 240824 / WID-SEC-2025-0975)

Vuldb Updates
8 months 3 weeks ago
A vulnerability marked as critical has been reported in Linux Kernel. Affected by this vulnerability is the function niu_try_msix. This manipulation causes denial of service. This vulnerability is handled as CVE-2025-37833. The attack can only be done within the local network. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

Empowering Teams with Efficient Secrets Rotation

Security Boulevard
8 months 3 weeks ago

How Can Efficient Secrets Rotation Empower Your Cybersecurity Team? How can organizations ensure the security of machine identities and secrets while maintaining team efficiency? The management of Non-Human Identities (NHIs), an often underexplored domain, offers a transformative approach. NHIs, essentially machine identities, are pivotal in creating a secure network environment, especially for organizations operating in […]

The post Empowering Teams with Efficient Secrets Rotation appeared first on Entro.

The post Empowering Teams with Efficient Secrets Rotation appeared first on Security Boulevard.

Alison Mack

How Reassured Are You by Your Cloud Compliance?

Security Boulevard
8 months 3 weeks ago

The Vital Role of Non-Human Identities in Cloud Compliance What makes cloud compliance an intricate challenge for modern enterprises? With digital transformation accelerates, businesses across various sectors face the critical task of ensuring robust cloud compliance. At the heart of this endeavor lies the intricate management of Non-Human Identities (NHIs)—a domain that demands meticulous attention […]

The post How Reassured Are You by Your Cloud Compliance? appeared first on Entro.

The post How Reassured Are You by Your Cloud Compliance? appeared first on Security Boulevard.

Alison Mack

Driving Innovation with Secure NHIs

Security Boulevard
8 months 3 weeks ago

How Are Non-Human Identities Shaping the Future of Cybersecurity? What happens when machines need their own form of identification? This question is increasingly relevant as we dive deeper of Non-Human Identities (NHIs), which are revolutionizing the way organizations handle cybersecurity. In industries ranging from financial services to healthcare, and even in areas like travel and […]

The post Driving Innovation with Secure NHIs appeared first on Entro.

The post Driving Innovation with Secure NHIs appeared first on Security Boulevard.

Alison Mack

Qilin

Dark Feed IO
8 months 3 weeks ago

You must login to view this content

cohenido

CVE-2025-37804 | Linux Kernel up to 6.6.88/6.12.25/6.14.4 io_uring reference count (Nessus ID 240824 / WID-SEC-2025-0975)

Vuldb Updates
8 months 3 weeks ago
A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.88/6.12.25/6.14.4. Impacted is an unknown function of the component io_uring. Performing manipulation results in improper update of reference count. This vulnerability was named CVE-2025-37804. The attack needs to be approached within the local network. There is no available exploit. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-37802 | Linux Kernel up to 6.12.25/6.14.4/6.15-rc2 ksmbd wait_event_timeout missing initialization (EUVD-2025-13991 / Nessus ID 240657)

Vuldb Updates
8 months 3 weeks ago
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.25/6.14.4/6.15-rc2. This issue affects the function wait_event_timeout of the component ksmbd. Such manipulation leads to missing initialization of a variable. This vulnerability is uniquely identified as CVE-2025-37802. The attack can only be initiated within the local network. No exploit exists. The affected component should be upgraded.
vuldb.com

CVE-2025-37801 | Linux Kernel up to 6.1.135/6.6.88/6.12.25/6.14.4/6.15-rc2 spi spi_imx_setupxfer null pointer dereference (Nessus ID 237504 / WID-SEC-2025-0975)

Vuldb Updates
8 months 3 weeks ago
A vulnerability identified as critical has been detected in Linux Kernel up to 6.1.135/6.6.88/6.12.25/6.14.4/6.15-rc2. This vulnerability affects the function spi_imx_setupxfer of the component spi. This manipulation causes null pointer dereference. This vulnerability is handled as CVE-2025-37801. The attack can only be done within the local network. There is not any exploit available. You should upgrade the affected component.
vuldb.com

CVE-2025-37803 | Linux Kernel up to 6.15-rc1 udmabuf size_limit_mb buffer overflow (EUVD-2025-13992 / Nessus ID 237255)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in Linux Kernel up to 6.15-rc1. It has been rated as critical. Affected by this issue is the function size_limit_mb of the component udmabuf. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2025-37803. Access to the local network is required for this attack to succeed. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-37800 | Linux Kernel up to 6.6.88/6.12.25/6.14.4/6.15-rc3 Driver Core dev_uevent null pointer dereference (EUVD-2025-13993 / Nessus ID 240657)

Vuldb Updates
8 months 3 weeks ago
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.88/6.12.25/6.14.4/6.15-rc3. This affects the function dev_uevent of the component Driver Core. The manipulation results in null pointer dereference. This vulnerability is known as CVE-2025-37800. Access to the local network is required for this attack. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

Managed ad