deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-53401
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()

KCSAN found an issue in obj_stock_flush_required():
stock->cached_objcg can be reset between the check and dereference:

==================================================================
BUG: KCSAN: data-race in drain_all_stock / drain_obj_stock

write to 0xffff888237c2a2f8 of 8 bytes by task 19625 on cpu 0:
 drain_obj_stock+0x408/0x4e0 mm/memcontrol.c:3306
 refill_obj_stock+0x9c/0x1e0 mm/memcontrol.c:3340
 obj_cgroup_uncharge+0xe/0x10 mm/memcontrol.c:3408
 memcg_slab_free_hook mm/slab.h:587 [inline]
 __cache_free mm/slab.c:3373 [inline]
 __do_kmem_cache_free mm/slab.c:3577 [inline]
 kmem_cache_free+0x105/0x280 mm/slab.c:3602
 __d_free fs/dcache.c:298 [inline]
 dentry_free fs/dcache.c:375 [inline]
 __dentry_kill+0x422/0x4a0 fs/dcache.c:621
 dentry_kill+0x8d/0x1e0
 dput+0x118/0x1f0 fs/dcache.c:913
 __fput+0x3bf/0x570 fs/file_table.c:329
 ____fput+0x15/0x20 fs/file_table.c:349
 task_work_run+0x123/0x160 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 exit_to_user_mode_loop+0xcf/0xe0 kernel/entry/common.c:171
 exit_to_user_mode_prepare+0x6a/0xa0 kernel/entry/common.c:203
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x26/0x140 kernel/entry/common.c:296
 do_syscall_64+0x4d/0xc0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

read to 0xffff888237c2a2f8 of 8 bytes by task 19632 on cpu 1:
 obj_stock_flush_required mm/memcontrol.c:3319 [inline]
 drain_all_stock+0x174/0x2a0 mm/memcontrol.c:2361
 try_charge_memcg+0x6d0/0xd10 mm/memcontrol.c:2703
 try_charge mm/memcontrol.c:2837 [inline]
 mem_cgroup_charge_skmem+0x51/0x140 mm/memcontrol.c:7290
 sock_reserve_memory+0xb1/0x390 net/core/sock.c:1025
 sk_setsockopt+0x800/0x1e70 net/core/sock.c:1525
 udp_lib_setsockopt+0x99/0x6c0 net/ipv4/udp.c:2692
 udp_setsockopt+0x73/0xa0 net/ipv4/udp.c:2817
 sock_common_setsockopt+0x61/0x70 net/core/sock.c:3668
 __sys_setsockopt+0x1c3/0x230 net/socket.c:2271
 __do_sys_setsockopt net/socket.c:2282 [inline]
 __se_sys_setsockopt net/socket.c:2279 [inline]
 __x64_sys_setsockopt+0x66/0x80 net/socket.c:2279
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd

value changed: 0xffff8881382d52c0 -> 0xffff[PII_REDACTED]40

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 19632 Comm: syz-executor.0 Not tainted 6.3.0-rc2-syzkaller-00387-g534293368afa #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023

Fix it by using READ_ONCE()/WRITE_ONCE() for all accesses to
stock->cached_objcg.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://git.kernel.org/stable/c/33391c7e1a2ad612bf3922cc168cb09a46bbe236; https://git.kernel.org/stable/c/33d9490b27e5d8da4444aefd714a4f50189db978; https://git.kernel.org/stable/c/3b8abb3239530c423c0b97e42af7f7e856e1ee96
CVE: CVE-2023-53402
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

kernel/printk/index.c: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/13969236b6900b5a3625ad[PII_REDACTED]e978f1cc; https://git.kernel.org/stable/c/2e07fa2e30d48d24a791483774a3d4b76769e0cf; https://git.kernel.org/stable/c/55bf243c514553e907efcf2bda92ba090eca8c64
CVE: CVE-2023-53403
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

time/debug: Fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic at
once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/15cffd01ed80e3506e29ba9f441e2358413b7317; https://git.kernel.org/stable/c/5b268d8abaec6cbd4bd70d062e769098d96670aa; https://git.kernel.org/stable/c/b588b42d077ce93c98704b41003bcec6a564b738
CVE: CVE-2023-53404
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

USB: fotg210: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/4a71b15744b8f286718722f80b663c06ed909d8a; https://git.kernel.org/stable/c/55c2ffc534928f[PII_REDACTED]e3b746d79a57898f; https://git.kernel.org/stable/c/6b4040f452037a7e[PII_REDACTED]1d57c6b18c89c5
CVE: CVE-2023-53405
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

USB: gadget: gr_udc: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/0933eca15f5223b5c2412080c8c3de8758465c78; https://git.kernel.org/stable/c/30f9ba2396a1130eef7f2d3ee7ee8037b7c25be9; https://git.kernel.org/stable/c/73f[PII_REDACTED]ad28daa67980c6dd11d83b303eb
CVE: CVE-2023-53406
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/6236a6d2cdfb710bd8a82c4b179d0a034d0d99cb; https://git.kernel.org/stable/c/78d9586d8e728be1e360d3d0da7170c791d1d55e; https://git.kernel.org/stable/c/7a038a681b7df78362d9fc7013e5395a694a9d3a
CVE: CVE-2023-53407
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/67c931a3f2f061bf457995fd21fff114325e0c30; https://git.kernel.org/stable/c/7a6952fa0366d4408eb8695af1a0578c39ec718a; https://git.kernel.org/stable/c/8da78a60f3323ce7aac589d49fb82f71a04bc835
CVE: CVE-2023-53408
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

trace/blktrace: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/3036f5f5ae5210797d95446795df01c1249af9ad; https://git.kernel.org/stable/c/5286b72fb425291af5f4ca7285d73c16a08d8691; https://git.kernel.org/stable/c/83e8864fee26f63a7435e941b7c36a20fd6fe93e
CVE: CVE-2023-53409
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

drivers: base: component: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/09709a49283f79184c998d6dafcc01590e4d654d; https://git.kernel.org/stable/c/79ac2b01e033181e21cc84216ace1f4160eb8950; https://git.kernel.org/stable/c/8deb87b1e810dd558371e88ffd44339fbef27870
CVE: CVE-2023-53410
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

USB: ULPI: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/2b8aa879e28df11e45855b04788050c61fb6b02a; https://git.kernel.org/stable/c/8f4d25eba599c4bd4b5ea8ae8752cda480a9d563; https://git.kernel.org/stable/c/dcbe69f4f743a938344b32e60531ea55355e0c08
CVE: CVE-2023-53411
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

PM: EM: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/30fee10192e1239478a0987bc7ee445d5e980d46; https://git.kernel.org/stable/c/5100c4efc30636aa48ac517dece3c3b7f84fe367; https://git.kernel.org/stable/c/84e4d4885d0ae011860fb599d50d01b8fdca2b87
CVE: CVE-2023-53412
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/31de0b70ae5661a407e9d578bbc41de2d83ac25d; https://git.kernel.org/stable/c/a91c99b1fe5c6f7e52fb932ad9e57ec7cfe913ec; https://git.kernel.org/stable/c/b0a2663ecbe8f65cd3bab2b34dd90156ceb0dbb8
CVE: CVE-2023-53413
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

USB: isp116x: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/542a99cd6eadfb543bf190431c3fb520f3da0bbc; https://git.kernel.org/stable/c/6f12097467ea1ef57f29dd29c1d082e4752cef37; https://git.kernel.org/stable/c/a60b4902a626dda08a31d9cf89ccce11bef8dd33
CVE: CVE-2023-53414
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

scsi: snic: Fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic at
once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/3dec769caf337c55814fbf79ec8c91a3cce23bf3; https://git.kernel.org/stable/c/5a46d8bdaf03e8a4bb83f0c363326d9aa66cc122; https://git.kernel.org/stable/c/995424f59ab52fb432b26ccb3abced63745ea041
CVE: CVE-2023-53415
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

USB: dwc3: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.

Note, the root dentry for the debugfs directory for the device needs to
be saved so we don't have to keep looking it up, which required a bit
more refactoring to properly create and remove it when needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/bab872b638130a18fd54d9adfad7db77ed6457be; https://git.kernel.org/stable/c/be308d68785b205e483b3a0c61ba3a82da468f2c; https://git.kernel.org/stable/c/ce234af49d103d95e3fdca59b25e0d0242f41bb4
CVE: CVE-2023-53416
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

USB: isp1362: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/9d537c35e48feba9d450acca0ff14a55ce1ec450; https://git.kernel.org/stable/c/b0a8195a84a725ca7936c213b5e056d2a3ab2a94; https://git.kernel.org/stable/c/c26e682afc14caa87d44beed271eec8991e93c65
CVE: CVE-2023-53417
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

USB: sl811: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/04fdfec7b0286972cb5457ef958c92585447a39f; https://git.kernel.org/stable/c/54166af8941d0cf46b65cfa2fbce76e38d82fadf; https://git.kernel.org/stable/c/bb4d5eefb67095d7c3b70b08498b23b7f2895f76
CVE: CVE-2023-53418
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup()

When calling debugfs_lookup() the result must have dput() called on it,
otherwise the memory will leak over time.  To make things simpler, just
call debugfs_lookup_and_remove() instead which handles all of the logic
at once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/036ada6ca9eea926abc0b0ef550b10488d66d4d8; https://git.kernel.org/stable/c/72c25eb9ae4993ccac4821354ff34eb1f32e4781; https://git.kernel.org/stable/c/7a5fdd8660174a8056de57d1fdce3a7e9f77f60e
CVE: CVE-2025-10668
Published: 2025-09-18
Description: A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/compose_msg_admin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/S77code/CVE1/issues/3; https://itsourcecode.com/; https://vuldb.com/?ctiid.324789
CVE: CVE-2025-10669
Published: 2025-09-18
Description: A vulnerability was detected in Airsonic-Advanced up to 10.6.0. This vulnerability affects unknown code of the component Playlist Upload Handler. Performing manipulation results in unrestricted upload. It is possible to initiate the attack remotely. The exploit is now public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434
References: https://github.com/mikecole-mg/security_findings/blob/main/airsonic-advanced/airsonic-rce.md; https://vuldb.com/?ctiid.324790; https://vuldb.com/?id.324790
CVE: CVE-2025-10670
Published: 2025-09-18
Description: A flaw has been found in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /check_profile.php. Executing manipulation of the argument profile_id can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/yihaofuweng/cve/issues/25; https://itsourcecode.com/; https://vuldb.com/?ctiid.324791
CVE: CVE-2025-4444
Published: 2025-09-18
Description: A security flaw has been discovered in Tor up to 0.4.7.16/0.4.8.17. Impacted is an unknown function of the component Onion Service Descriptor Handler. Performing manipulation results in resource consumption. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered difficult. Upgrading to version 0.4.8.18 and 0.4.9.3-alpha is recommended to address this issue. It is recommended to upgrade the affected component.
CVSS Score: 3.7 (LOW)
CWE: CWE-400, CWE-404
References: https://forum.torproject.org/t/alpha-and-stable-release-0-4-8-18-and-0-4-9-3-alpha/20578; https://github.com/chunmianwang/Tordos; https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes
CVE: CVE-2025-10671
Published: 2025-09-18
Description: A vulnerability has been found in youth-is-as-pale-as-poetry e-learning 1.0. Impacted is the function encryptSecret of the file e-learning-master\exam-api\src\main\java\com\yf\exam\ability\shiro\jwt\JwtUtils.java of the component JWT Token Handler. The manipulation leads to insufficiently random values. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.7 (LOW)
CWE: CWE-310, CWE-330
References: https://github.com/SuJing-cy/CVE/blob/main/yfhl.md; https://vuldb.com/?ctiid.324792; https://vuldb.com/?id.324792
CVE: CVE-2025-10672
Published: 2025-09-18
Description: A vulnerability was found in whuan132 AIBattery up to 1.0.9. The affected element is an unknown function of the file AIBatteryHelper/XPC/BatteryXPCService.swift of the component com.collweb.AIBatteryHelper. The manipulation results in missing authentication. The attack requires a local approach. The exploit has been made public and could be used.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287, CWE-306
References: https://github.com/SwayZGl1tZyyy/n-days/blob/main/AIBattery-Charge-Limiter/README.md; https://github.com/SwayZGl1tZyyy/n-days/blob/main/AIBattery-Charge-Limiter/README.md#proof-of-concept; https://vuldb.com/?ctiid.324793
CVE: CVE-2025-10673
Published: 2025-09-18
Description: A vulnerability was determined in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/class/index.php. This manipulation of the argument classId causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/windhxy/CVE-my/issues/1; https://itsourcecode.com/; https://vuldb.com/?ctiid.324794
CVE: CVE-2025-55911
Published: 2025-09-18
Description: An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://medium.com/@mukund.s1337/cve-2025-55911-clipbucket-5-5-2-build-90-ssrf-via-upload-actions-file-downloader-php-eb49dc02bd6f
CVE: CVE-2025-57452
Published: 2025-09-18
Description: In realme BackupRestore app v15.1.12_2810c08_250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attackers to cause a crash and potential XSS via crafted ADB intents.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://realme.com/; https://gist.github.com/Brucewebva/8a37010c5b1f05fd5e61591830bcbb37
CVE: CVE-2025-59040
Published: 2025-09-18
Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representations do not verify the permissions of the child trackers. Users might see tracker names they should not have access to. This vulnerability is fixed in Tuleap Community Edition 16.11.99[PII_REDACTED] and Tuleap Enterprise Edition 16.11-6 and 16.10-8.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-280
References: https://github.com/Enalean/tuleap/commit/92e4aa2d830a624a9183206c1c3558b90b8a5525; https://github.com/Enalean/tuleap/security/advisories/GHSA-67xc-39v9-pffg; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=92e4aa2d830a624a9183206c1c3558b90b8a5525
CVE: CVE-2025-59417
Published: 2025-09-18
Description: Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.129.4, there is a a cross-site scripting (XSS) vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. In lobe-chat, when the response from the server is like <lobeArtifact identifier="ai-new-interpretation" ...> , it will be rendered with the lobeArtifact node, instead of the plain text. However, when the type of the lobeArtifact is image/svg+xml , it will be rendered as the SVGRender component, which internally uses dangerouslySetInnerHTML to set the content of the svg, resulting in XSS attack. Any party capable of injecting content into chat messages, such as hosting a malicious page for prompt injection, operating a compromised MCP server, or leveraging tool integrations, can exploit this vulnerability. This vulnerability is fixed in 1.129.4.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/lobehub/lobe-chat/commit/9f044edd07ce102fe9f4b2fb47c62191c36da05c; https://github.com/lobehub/lobe-chat/security/advisories/GHSA-m79r-r765-5f9j; https://github.com/lobehub/lobe-chat/security/advisories/GHSA-m79r-r765-5f9j
CVE: CVE-2025-59421
Published: 2025-09-18
Description: Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). A bad actor can flood the inbox of a user by repeatedly sending invites (duplicate). The issue is fixed in commit 83c3fc7676c5dbbe1fd5092d21d95a10c7b48615.
CWE: CWE-770
References: https://github.com/frappe/press/commit/83c3fc7676c5dbbe1fd5092d21d95a10c7b48615; https://github.com/frappe/press/security/advisories/GHSA-68qm-vp8f-rpr3
CVE: CVE-2022-50402
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()

Check the return value of md_bitmap_get_counter() in case it returns
NULL pointer, which will result in a null pointer dereference.

v2: update the check to include other dereference
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://git.kernel.org/stable/c/100caacfa0ed26e061954c90cdc835d42f709536; https://git.kernel.org/stable/c/21e9aac9a74d30907d44bae0d24c036cb3819406; https://git.kernel.org/stable/c/3bd548e5b819b8c0f2c9085de775c5c7bff9052f
CVE: CVE-2022-50403
Published: 2025-09-18
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2022-50404
Published: 2025-09-18
Description: In the Linux kernel, the following vulnerability has been resolved:

fbdev: fbcon: release buffer when fbcon_do_set_font() failed

syzbot is reporting memory leak at fbcon_do_set_font() [1], for
commit a5a923038d70 ("fbdev: fbcon: Properly revert changes when
vc_resize() failed") missed that the buffer might be newly allocated
by fbcon_set_font().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/06926607b9fddf7ce[PII_REDACTED]ce6eb7e79a123; https://git.kernel.org/stable/c/3c3bfb8586f848317ceba5d777e11204ba3e5758; https://git.kernel.org/stable/c/5a341810a22e51c3a7a108f7896b5fd58d44d127