<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 02 Jun 2026 06:24:31 +0000</lastBuildDate>
    <item>
      <title>bd05b16a-93ab-4658-a3a4-a195336320e1</title>
      <link>https://vulnerability.circl.lu/sighting/bd05b16a-93ab-4658-a3a4-a195336320e1/export</link>
      <description>{"uuid": "bd05b16a-93ab-4658-a3a4-a195336320e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23161", "type": "seen", "source": "https://t.me/cvedetector/24228", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23161 - Linux kernel PCI VMD Raw Spinlock Type Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23161 \nPublished : May 1, 2025, 1:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nPCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type  \n  \nThe access to the PCI config space via pci_ops::read and pci_ops::write is  \na low-level hardware access. The functions can be accessed with disabled  \ninterrupts even on PREEMPT_RT. The pci_lock is a raw_spinlock_t for this  \npurpose.  \n  \nA spinlock_t becomes a sleeping lock on PREEMPT_RT, so it cannot be  \nacquired with disabled interrupts. The vmd_dev::cfg_lock is accessed in  \nthe same context as the pci_lock.  \n  \nMake vmd_dev::cfg_lock a raw_spinlock_t type so it can be used with  \ninterrupts disabled.  \n  \nThis was reported as:  \n  \n  BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48  \n  Call Trace:  \n   rt_spin_lock+0x4e/0x130  \n   vmd_pci_read+0x8d/0x100 [vmd]  \n   pci_user_read_config_byte+0x6f/0xe0  \n   pci_read_config+0xfe/0x290  \n   sysfs_kf_bin_read+0x68/0x90  \n  \n[bigeasy: reword commit message]  \nTested-off-by: Luis Claudio R. Goncalves   \n[kwilczynski: commit log]  \n[bhelgaas: add back report info from  \n] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T16:30:26.000000Z"}</description>
      <content:encoded>{"uuid": "bd05b16a-93ab-4658-a3a4-a195336320e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23161", "type": "seen", "source": "https://t.me/cvedetector/24228", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23161 - Linux kernel PCI VMD Raw Spinlock Type Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23161 \nPublished : May 1, 2025, 1:15 p.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nPCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type  \n  \nThe access to the PCI config space via pci_ops::read and pci_ops::write is  \na low-level hardware access. The functions can be accessed with disabled  \ninterrupts even on PREEMPT_RT. The pci_lock is a raw_spinlock_t for this  \npurpose.  \n  \nA spinlock_t becomes a sleeping lock on PREEMPT_RT, so it cannot be  \nacquired with disabled interrupts. The vmd_dev::cfg_lock is accessed in  \nthe same context as the pci_lock.  \n  \nMake vmd_dev::cfg_lock a raw_spinlock_t type so it can be used with  \ninterrupts disabled.  \n  \nThis was reported as:  \n  \n  BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48  \n  Call Trace:  \n   rt_spin_lock+0x4e/0x130  \n   vmd_pci_read+0x8d/0x100 [vmd]  \n   pci_user_read_config_byte+0x6f/0xe0  \n   pci_read_config+0xfe/0x290  \n   sysfs_kf_bin_read+0x68/0x90  \n  \n[bigeasy: reword commit message]  \nTested-off-by: Luis Claudio R. Goncalves   \n[kwilczynski: commit log]  \n[bhelgaas: add back report info from  \n] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T16:30:26.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bd05b16a-93ab-4658-a3a4-a195336320e1/export</guid>
      <pubDate>Thu, 01 May 2025 16:30:26 +0000</pubDate>
    </item>
    <item>
      <title>4ae461e3-8d73-4792-ad62-89b768232bcf</title>
      <link>https://vulnerability.circl.lu/sighting/4ae461e3-8d73-4792-ad62-89b768232bcf/export</link>
      <description>{"uuid": "4ae461e3-8d73-4792-ad62-89b768232bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-23161", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}</description>
      <content:encoded>{"uuid": "4ae461e3-8d73-4792-ad62-89b768232bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-23161", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4ae461e3-8d73-4792-ad62-89b768232bcf/export</guid>
      <pubDate>Wed, 03 Dec 2025 14:14:49 +0000</pubDate>
    </item>
  </channel>
</rss>
