<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 22 Jun 2026 06:28:58 +0000</lastBuildDate>
    <item>
      <title>78f263f6-aeee-47ea-998b-a8a6bbefc18d</title>
      <link>https://vulnerability.circl.lu/sighting/78f263f6-aeee-47ea-998b-a8a6bbefc18d/export</link>
      <description>{"uuid": "78f263f6-aeee-47ea-998b-a8a6bbefc18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38075", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18706", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-38075\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix timeout on deleted connection\n\nNOPIN response timer may expire on a deleted connection and crash with\nsuch logs:\n\nDid not receive response to NOPIN on CID: 0, failing connection for I_T Nexus (null),i,0x00023d000125,iqn.2017-01.com.iscsi.target,t,0x3d\n\nBUG: Kernel NULL pointer dereference on read at 0x00000000\nNIP  strlcpy+0x8/0xb0\nLR iscsit_fill_cxn_timeout_err_stats+0x5c/0xc0 [iscsi_target_mod]\nCall Trace:\n iscsit_handle_nopin_response_timeout+0xfc/0x120 [iscsi_target_mod]\n call_timer_fn+0x58/0x1f0\n run_timer_softirq+0x740/0x860\n __do_softirq+0x16c/0x420\n irq_exit+0x188/0x1c0\n timer_interrupt+0x184/0x410\n\nThat is because nopin response timer may be re-started on nopin timer\nexpiration.\n\nStop nopin timer before stopping the nopin response timer to be sure\nthat no one of them will be re-started.\n\ud83d\udccf Published: 2025-06-18T09:33:50.646Z\n\ud83d\udccf Modified: 2025-06-18T09:33:50.646Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/571ce6b6f5cbaf7d24af03cad592fc0e2a54de35\n2. https://git.kernel.org/stable/c/2c5081439c7ab8da08427befe427f0d732ebc9f9\n3. https://git.kernel.org/stable/c/019ca2804f3fb49a7f8e56ea6aeaa1ff32724c27\n4. https://git.kernel.org/stable/c/6815846e0c3a62116a7da9740e3a7c10edc5c7e9\n5. https://git.kernel.org/stable/c/fe8421e853ef289e1324fcda004751c89dd9c18a\n6. https://git.kernel.org/stable/c/87389bff743c55b6b85282de91109391f43e0814\n7. https://git.kernel.org/stable/c/3e6429e3707943078240a2c0c0b3ee99ea9b0d9c\n8. https://git.kernel.org/stable/c/7f533cc5ee4c4436cee51dc58e81dfd9c3384418", "creation_timestamp": "2025-06-18T10:40:03.000000Z"}</description>
      <content:encoded>{"uuid": "78f263f6-aeee-47ea-998b-a8a6bbefc18d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38075", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18706", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-38075\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix timeout on deleted connection\n\nNOPIN response timer may expire on a deleted connection and crash with\nsuch logs:\n\nDid not receive response to NOPIN on CID: 0, failing connection for I_T Nexus (null),i,0x00023d000125,iqn.2017-01.com.iscsi.target,t,0x3d\n\nBUG: Kernel NULL pointer dereference on read at 0x00000000\nNIP  strlcpy+0x8/0xb0\nLR iscsit_fill_cxn_timeout_err_stats+0x5c/0xc0 [iscsi_target_mod]\nCall Trace:\n iscsit_handle_nopin_response_timeout+0xfc/0x120 [iscsi_target_mod]\n call_timer_fn+0x58/0x1f0\n run_timer_softirq+0x740/0x860\n __do_softirq+0x16c/0x420\n irq_exit+0x188/0x1c0\n timer_interrupt+0x184/0x410\n\nThat is because nopin response timer may be re-started on nopin timer\nexpiration.\n\nStop nopin timer before stopping the nopin response timer to be sure\nthat no one of them will be re-started.\n\ud83d\udccf Published: 2025-06-18T09:33:50.646Z\n\ud83d\udccf Modified: 2025-06-18T09:33:50.646Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/571ce6b6f5cbaf7d24af03cad592fc0e2a54de35\n2. https://git.kernel.org/stable/c/2c5081439c7ab8da08427befe427f0d732ebc9f9\n3. https://git.kernel.org/stable/c/019ca2804f3fb49a7f8e56ea6aeaa1ff32724c27\n4. https://git.kernel.org/stable/c/6815846e0c3a62116a7da9740e3a7c10edc5c7e9\n5. https://git.kernel.org/stable/c/fe8421e853ef289e1324fcda004751c89dd9c18a\n6. https://git.kernel.org/stable/c/87389bff743c55b6b85282de91109391f43e0814\n7. https://git.kernel.org/stable/c/3e6429e3707943078240a2c0c0b3ee99ea9b0d9c\n8. https://git.kernel.org/stable/c/7f533cc5ee4c4436cee51dc58e81dfd9c3384418", "creation_timestamp": "2025-06-18T10:40:03.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/78f263f6-aeee-47ea-998b-a8a6bbefc18d/export</guid>
      <pubDate>Wed, 18 Jun 2025 10:40:03 +0000</pubDate>
    </item>
    <item>
      <title>35fd72cf-ab04-48dd-9c4b-fcb5ffdb140e</title>
      <link>https://vulnerability.circl.lu/sighting/35fd72cf-ab04-48dd-9c4b-fcb5ffdb140e/export</link>
      <description>{"uuid": "35fd72cf-ab04-48dd-9c4b-fcb5ffdb140e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38075", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lruxob4k7r2o", "content": "", "creation_timestamp": "2025-06-18T12:02:50.802933Z"}</description>
      <content:encoded>{"uuid": "35fd72cf-ab04-48dd-9c4b-fcb5ffdb140e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38075", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lruxob4k7r2o", "content": "", "creation_timestamp": "2025-06-18T12:02:50.802933Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/35fd72cf-ab04-48dd-9c4b-fcb5ffdb140e/export</guid>
      <pubDate>Wed, 18 Jun 2025 12:02:50 +0000</pubDate>
    </item>
  </channel>
</rss>
