https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 27 May 2026 17:48:27 +0000 https://vulnerability.circl.lu/sighting/7777bcea-2da8-4ab6-a1b6-eaea5ca82685/export {"uuid": "7777bcea-2da8-4ab6-a1b6-eaea5ca82685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48703", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16480", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48703\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR\n\nIn some case, the GDDV returns a package with a buffer which has\nzero length. It causes that kmemdup() returns ZERO_SIZE_PTR (0x10).\n\nThen the data_vault_read() got NULL point dereference problem when\naccessing the 0x10 value in data_vault.\n\n[ 71.024560] BUG: kernel NULL pointer dereference, address:\n0000000000000010\n\nThis patch uses ZERO_OR_NULL_PTR() for checking ZERO_SIZE_PTR or\nNULL value in data_vault.\n\ud83d\udccf Published: 2024-05-03T15:14:07.390Z\n\ud83d\udccf Modified: 2025-05-15T12:28:05.793Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/dae42083b045a4ddf71c57cf350cb2412b5915c2\n2. https://git.kernel.org/stable/c/7931e28098a4c1a2a6802510b0cbe57546d2049d", "creation_timestamp": "2025-05-15T12:34:27.000000Z"} {"uuid": "7777bcea-2da8-4ab6-a1b6-eaea5ca82685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48703", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16480", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48703\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR\n\nIn some case, the GDDV returns a package with a buffer which has\nzero length. It causes that kmemdup() returns ZERO_SIZE_PTR (0x10).\n\nThen the data_vault_read() got NULL point dereference problem when\naccessing the 0x10 value in data_vault.\n\n[ 71.024560] BUG: kernel NULL pointer dereference, address:\n0000000000000010\n\nThis patch uses ZERO_OR_NULL_PTR() for checking ZERO_SIZE_PTR or\nNULL value in data_vault.\n\ud83d\udccf Published: 2024-05-03T15:14:07.390Z\n\ud83d\udccf Modified: 2025-05-15T12:28:05.793Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/dae42083b045a4ddf71c57cf350cb2412b5915c2\n2. https://git.kernel.org/stable/c/7931e28098a4c1a2a6802510b0cbe57546d2049d", "creation_timestamp": "2025-05-15T12:34:27.000000Z"} https://vulnerability.circl.lu/sighting/7777bcea-2da8-4ab6-a1b6-eaea5ca82685/export Thu, 15 May 2025 12:34:27 +0000