Monthly
TX-completion memory mishandling in the Linux kernel's Intel igc (I225/I226 2.5GbE) driver stems from igc_fpe_init_smd_frame() failing to set the tx-buffer type on SMD (Frame Preemption) frames, so a reused igc_tx_buffer can retain a stale XDP or XSK type and be freed through the wrong cleanup path. This affects local systems running an igc NIC with Frame Preemption active, and the realistic impact is memory corruption or a driver crash rather than remote compromise. No public exploit identified at time of analysis; EPSS is very low (0.17%, 6th percentile) and it is not in CISA KEV, despite the NVD-assigned 9.8 CVSS.
Kernel memory disclosure in the Linux kernel IPv6 neighbor discovery code (ndisc_ra_useropt) allows leaking uninitialized kernel stack/heap data to netlink listeners. When the kernel processes IPv6 Router Advertisements carrying user options, it builds an RTM_NEWNDUSEROPT netlink message whose nduseroptmsg struct contains three padding fields that were never zeroed, exposing residual kernel data. There is no public exploit identified at time of analysis and EPSS is very low (0.02%), consistent with a low-severity information-leak that requires a local privileged netlink listener rather than a remotely weaponizable flaw.
Out-of-bounds write in Exim before 4.99.2 SPA authentication driver allows remote attackers to crash the mail server connection or leak uninitialized heap memory when processing adversarial SPA authentication resources, affecting confidentiality and availability of the mail service.
PAD CMS improperly initializes parameter used for password recovery, which allows to change password for any user that did not use reset password functionality. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: clear initialized flag for deinit-ed srng lists In a number of cases we see kernel panics on resume due to ath11k. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.
In the Linux kernel, the following vulnerability has been resolved: net: libwx: properly reset Rx ring descriptor When device reset is triggered by feature changes such as toggling Rx VLAN offload,. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.
CVE-2022-50169 is an information disclosure vulnerability in the Linux kernel's Qualcomm wil6210 WiFi driver debugfs implementation, where the wil_write_file_wmi() function fails to fully initialize a buffer before use, allowing local authenticated users to leak kernel memory. The vulnerability affects Linux kernels with the wil6210 driver enabled and has a CVSS score of 7.1 (high severity) with local attack vector and high confidentiality impact. There is no evidence of active exploitation in the wild or public proof-of-concept code, making this a lower real-world priority despite the high CVSS rating.
In the Linux kernel, the following vulnerability has been resolved: ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network When copying a `struct ifaddrlblmsg` to the network,. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity.
In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix abort all task initialization In pm80xx_send_abort_all(), the n_elem field of the ccb used is not initialized to. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.
Teradata Vantage Editor 1.0.1 is mostly intended for SQL database access and docs.teradata.com access, but provides unintended functionality (including Chromium Developer Tools) that can result in a. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
TX-completion memory mishandling in the Linux kernel's Intel igc (I225/I226 2.5GbE) driver stems from igc_fpe_init_smd_frame() failing to set the tx-buffer type on SMD (Frame Preemption) frames, so a reused igc_tx_buffer can retain a stale XDP or XSK type and be freed through the wrong cleanup path. This affects local systems running an igc NIC with Frame Preemption active, and the realistic impact is memory corruption or a driver crash rather than remote compromise. No public exploit identified at time of analysis; EPSS is very low (0.17%, 6th percentile) and it is not in CISA KEV, despite the NVD-assigned 9.8 CVSS.
Kernel memory disclosure in the Linux kernel IPv6 neighbor discovery code (ndisc_ra_useropt) allows leaking uninitialized kernel stack/heap data to netlink listeners. When the kernel processes IPv6 Router Advertisements carrying user options, it builds an RTM_NEWNDUSEROPT netlink message whose nduseroptmsg struct contains three padding fields that were never zeroed, exposing residual kernel data. There is no public exploit identified at time of analysis and EPSS is very low (0.02%), consistent with a low-severity information-leak that requires a local privileged netlink listener rather than a remotely weaponizable flaw.
Out-of-bounds write in Exim before 4.99.2 SPA authentication driver allows remote attackers to crash the mail server connection or leak uninitialized heap memory when processing adversarial SPA authentication resources, affecting confidentiality and availability of the mail service.
PAD CMS improperly initializes parameter used for password recovery, which allows to change password for any user that did not use reset password functionality. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: clear initialized flag for deinit-ed srng lists In a number of cases we see kernel panics on resume due to ath11k. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.
In the Linux kernel, the following vulnerability has been resolved: net: libwx: properly reset Rx ring descriptor When device reset is triggered by feature changes such as toggling Rx VLAN offload,. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.
CVE-2022-50169 is an information disclosure vulnerability in the Linux kernel's Qualcomm wil6210 WiFi driver debugfs implementation, where the wil_write_file_wmi() function fails to fully initialize a buffer before use, allowing local authenticated users to leak kernel memory. The vulnerability affects Linux kernels with the wil6210 driver enabled and has a CVSS score of 7.1 (high severity) with local attack vector and high confidentiality impact. There is no evidence of active exploitation in the wild or public proof-of-concept code, making this a lower real-world priority despite the high CVSS rating.
In the Linux kernel, the following vulnerability has been resolved: ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network When copying a `struct ifaddrlblmsg` to the network,. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity.
In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix abort all task initialization In pm80xx_send_abort_all(), the n_elem field of the ccb used is not initialized to. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.
Teradata Vantage Editor 1.0.1 is mostly intended for SQL database access and docs.teradata.com access, but provides unintended functionality (including Chromium Developer Tools) that can result in a. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.