Posts of last 24 hours

CVE-2025-21629 | Linux Kernel up to 6.1.123/6.6.69/6.12.8 on BIG IPv6 Extension Header skbuff.h ipv6_has_hopopt_jumbo privilege escalation (EUVD-2025-2578 / Nessus ID 216985)
A vulnerability was found in Linux Kernel up to 6.1.123/6.6.69/6.12.8 on BIG. It has been declared as problematic. This affects the function ipv6_has_hopopt_jumbo in the library skbuff.h of the component IPv6 Extension Header Handler. The manipulation results in privilege escalation. This vulnerability was named CVE-2025-21629. The attack needs to be approached within the local network. There is no available exploit. It is recommended to upgrade the affected component.
https://vuldb.com/vuln/291949
CVE-2025-21637 | Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6 sysctl null pointer dereference (Nessus ID 215144 / WID-SEC-2025-0119)
A vulnerability was found in Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6. It has been classified as critical. This issue affects some unknown processing of the component sysctl. This manipulation causes null pointer dereference. The identification of this vulnerability is CVE-2025-21637. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is recommended.
https://vuldb.com/vuln/292550
CVE-2025-21638 | Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6 sysctl null pointer dereference (Nessus ID 215144 / WID-SEC-2025-0119)
A vulnerability was found in Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6. It has been declared as critical. Impacted is an unknown function of the component sysctl. Such manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2025-21638. The attack needs to be initiated within the local network. No exploit is available. It is recommended to upgrade the affected component.
https://vuldb.com/vuln/292551
CVE-2025-21640 | Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6 cookie_hmac_alg null pointer dereference (Nessus ID 215144 / WID-SEC-2025-0119)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6. This impacts an unknown function of the component cookie_hmac_alg. The manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2025-21640. The attack must originate from the local network. There is no exploit available. The affected component should be upgraded.
https://vuldb.com/vuln/292555
CVE-2025-21646 | Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6 afs /proc/net/afs/ privilege escalation (EUVD-2025-2595 / Nessus ID 215144)
A vulnerability described as problematic has been identified in Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6. Affected by this vulnerability is an unknown functionality of the file /proc/net/afs/ of the component afs. Such manipulation leads to privilege escalation. This vulnerability is documented as CVE-2025-21646. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is recommended.
https://vuldb.com/vuln/292557
CVE-2025-21647 | Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6 sch_cake out-of-bounds (EUVD-2025-2596 / Nessus ID 215144)
A vulnerability classified as problematic has been found in Linux Kernel up to 6.1.124/6.6.71/6.12.9/6.13-rc6. Affected by this issue is some unknown functionality of the component sch_cake. Performing a manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2025-21647. The attacker must have access to the local network to execute the attack. No exploit exists. It is recommended to upgrade the affected component.
https://vuldb.com/vuln/292558
CVE-2025-21650 | Linux Kernel up to 6.12.9/6.13-rc6 hclge_fetch_pf_reg initialization (EUVD-2025-2599 / Nessus ID 214901)
A vulnerability was found in Linux Kernel up to 6.12.9/6.13-rc6. It has been rated as problematic. This impacts the function hclge_fetch_pf_reg. The manipulation leads to improper initialization. This vulnerability is referenced as CVE-2025-21650. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is advised.
https://vuldb.com/vuln/292566
CVE-2025-21655 | Linux Kernel up to 6.1.124/6.6.71/6.12.9 eventfd io_eventfd_signal reference count (Nessus ID 215034 / WID-SEC-2025-0132)
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.1.124/6.6.71/6.12.9. Affected by this vulnerability is the function io_eventfd_signal of the component eventfd. Performing a manipulation results in improper update of reference count. This vulnerability is identified as CVE-2025-21655. The attack can only be performed from the local network. Additionally, an exploit exists. It is suggested to upgrade the affected component.
https://vuldb.com/vuln/292612
CVE-2025-21663 | Linux Kernel up to 6.6.71/6.12.9 dwmac-tegra denial of service (Nessus ID 216191 / WID-SEC-2025-0155)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.6.71/6.12.9. This affects an unknown part of the component dwmac-tegra. This manipulation causes denial of service. This vulnerability is tracked as CVE-2025-21663. The attack is only possible within the local network. No exploit exists. It is advisable to upgrade the affected component.
https://vuldb.com/vuln/292658
CVE-2025-21659 | Linux Kernel up to 6.12.9 napi_by_id privilege escalation (Nessus ID 233479 / WID-SEC-2025-0155)
A vulnerability described as problematic has been identified in Linux Kernel up to 6.12.9. This affects the function napi_by_id. The manipulation results in privilege escalation. This vulnerability was named CVE-2025-21659. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is recommended.
https://vuldb.com/vuln/292669

Managed ad