[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-22036":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":36,"aliases":37,"duplicate_of":9,"upstream":38,"downstream":39,"duplicates":96,"related":97,"reserved_at":9,"published_at":108,"modified_at":109,"state":110,"summary":111,"references_raw":119,"kevs":138,"epss":139,"epss_history":142,"metrics":413,"affected":421},"CVE-2025-22036","In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix random stack corruption after get_block\n\nWhen get_block is called with a buffer_head allocated on the stack, such\nas do_mpage_readpage, stack corruption due to buffer_head UAF may occur in\nthe following race condition situation.\n\n     \u003CCPU 0>                      \u003CCPU 1>\nmpage_read_folio\n  \u003C\u003Cbh on stack>>\n  do_mpage_readpage\n    exfat_get_block\n      bh_read\n        __bh_read\n\t  get_bh(bh)\n          submit_bh\n          wait_on_buffer\n                              ...\n                              end_buffer_read_sync\n                                __end_buffer_read_notouch\n                                   unlock_buffer\n          \u003C\u003Ckeep going>>\n        ...\n      ...\n    ...\n  ...\n\u003C\u003Cbh is not valid out of mpage_read_folio>>\n   .\n   .\nanother_function\n  \u003C\u003Cvariable A on stack>>\n                                   put_bh(bh)\n                                     atomic_dec(bh->b_count)\n  * stack corruption here *\n\nThis patch returns -EAGAIN if a folio does not have buffers when bh_read\nneeds to be called. By doing this, the caller can fallback to functions\nlike block_read_full_folio(), create a buffer_head in the folio, and then\ncall get_block again.\n\nLet's do not call bh_read() with on-stack buffer_head.",null,[11,28],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-362","Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","weakness","Draft","Class","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-26","Leveraging Race Conditions",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],{"_key":29,"id":29,"name":30,"description":31,"type":15,"status":32,"abstraction":33,"likelihood_of_exploit":34,"capec":35},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","Stable","Variant","High",[],[],[],[],[40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94],{"_key":41},"SUSE-SU-2025:01919-1",{"_key":43},"SUSE-SU-2025:01951-1",{"_key":45},"SUSE-SU-2025:01967-1",{"_key":47},"USN-7594-1",{"_key":49},"USN-7594-2",{"_key":51},"USN-7594-3",{"_key":53},"SUSE-SU-2025:01707-1",{"_key":55},"SUSE-SU-2025:01964-1",{"_key":57},"RHSA-2025:10854",{"_key":59},"SUSE-SU-2025:20343-1",{"_key":61},"SUSE-SU-2025:20344-1",{"_key":63},"SUSE-SU-2025:20354-1",{"_key":65},"SUSE-SU-2025:20355-1",{"_key":67},"SUSE-SU-2025:01614-1",{"_key":69},"LSN-0118-1",{"_key":71},"DEBIAN-CVE-2025-22036",{"_key":73},"UBUNTU-CVE-2025-22036",{"_key":75},"LSN-0117-1",{"_key":77},"USN-7835-1",{"_key":79},"USN-7835-2",{"_key":81},"USN-7835-3",{"_key":83},"USN-7835-4",{"_key":85},"USN-7835-5",{"_key":87},"USN-7835-6",{"_key":89},"USN-7887-1",{"_key":91},"USN-7887-2",{"_key":93},"USN-7940-1",{"_key":95},"USN-7940-2",[],[98,99,100,101,102,103,104,105,106,107],{"_key":41},{"_key":43},{"_key":45},{"_key":53},{"_key":55},{"_key":59},{"_key":61},{"_key":63},{"_key":65},{"_key":67},"2025-04-16T14:11:54.916Z","2026-05-11T21:11:23.972Z","Modified",{"cisa_kev":112,"cisa_ransomware":112,"cisa_vendor":9,"epss_severity":113,"epss_score":114,"severity":115,"severity_score":4,"severity_version":116,"severity_source":117,"severity_vector":118,"severity_status":110},false,"low",0.00052,"high","v3.1","cve.org","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",[120,126,130,134],{"url":121,"sources":122,"tags":124},"https://git.kernel.org/stable/c/49b0a6ab8e528a0c1c50e37cef9b9c7c121365f2",[117,123],"nvd",[125],"Patch",{"url":127,"sources":128,"tags":129},"https://git.kernel.org/stable/c/f7447286363dc1e410bf30b87d75168f3519f9cc",[117,123],[125],{"url":131,"sources":132,"tags":133},"https://git.kernel.org/stable/c/f807a6bf2005740fa26b4f59c4a003dc966b9afd",[117,123],[125],{"url":135,"sources":136,"tags":137},"https://git.kernel.org/stable/c/1bb7ff4204b6d4927e982cd256286c09ed4fd8ca",[117,123],[125],[],{"date":140,"score":114,"percentile":141},"2026-06-03",0.16534,[143,147,150,153,156,159,162,166,169,172,175,178,181,184,187,191,194,197,200,203,206,209,213,216,219,222,225,228,231,234,237,240,243,246,249,251,254,257,260,263,266,269,271,274,277,280,283,286,289,292,294,297,300,303,306,308,310,313,317,320,323,326,329,332,335,338,341,344,348,351,354,357,360,363,366,369,372,375,378,381,384,387,390,393,396,399,402,405,408,410],{"date":144,"score":145,"percentile":146},"2025-11-04",0.00012,0.0124,{"date":148,"score":145,"percentile":149},"2025-11-05",0.0126,{"date":151,"score":145,"percentile":152},"2025-11-06",0.01273,{"date":154,"score":145,"percentile":155},"2025-11-07",0.01276,{"date":157,"score":145,"percentile":158},"2025-11-08",0.01279,{"date":160,"score":145,"percentile":161},"2025-11-09",0.01277,{"date":163,"score":164,"percentile":165},"2025-11-10",0.00014,0.01746,{"date":167,"score":164,"percentile":168},"2025-11-11",0.01755,{"date":170,"score":164,"percentile":171},"2025-11-12",0.01767,{"date":173,"score":164,"percentile":174},"2025-11-13",0.01782,{"date":176,"score":164,"percentile":177},"2025-11-14",0.01784,{"date":179,"score":164,"percentile":180},"2025-11-15",0.01804,{"date":182,"score":164,"percentile":183},"2025-11-16",0.01809,{"date":185,"score":164,"percentile":186},"2025-11-17",0.01797,{"date":188,"score":189,"percentile":190},"2025-11-18",0.00029,0.04273,{"date":192,"score":189,"percentile":193},"2025-11-19",0.04314,{"date":195,"score":189,"percentile":196},"2025-11-20",0.04371,{"date":198,"score":164,"percentile":199},"2025-11-21",0.01862,{"date":201,"score":164,"percentile":202},"2025-11-22",0.0186,{"date":204,"score":164,"percentile":205},"2025-11-23",0.01854,{"date":207,"score":164,"percentile":208},"2025-11-24",0.01842,{"date":210,"score":211,"percentile":212},"2025-11-25",0.00015,0.02041,{"date":214,"score":211,"percentile":215},"2025-11-26",0.02003,{"date":217,"score":211,"percentile":218},"2025-11-27",0.02002,{"date":220,"score":164,"percentile":221},"2025-11-28",0.01796,{"date":223,"score":164,"percentile":224},"2025-11-29",0.01843,{"date":226,"score":164,"percentile":227},"2025-11-30",0.01851,{"date":229,"score":164,"percentile":230},"2025-12-01",0.01886,{"date":232,"score":164,"percentile":233},"2025-12-02",0.01883,{"date":235,"score":164,"percentile":236},"2025-12-03",0.0189,{"date":238,"score":164,"percentile":239},"2025-12-04",0.01856,{"date":241,"score":164,"percentile":242},"2025-12-05",0.01871,{"date":244,"score":164,"percentile":245},"2025-12-06",0.01876,{"date":247,"score":164,"percentile":248},"2025-12-07",0.01872,{"date":250,"score":164,"percentile":248},"2025-12-08",{"date":252,"score":164,"percentile":253},"2025-12-09",0.01889,{"date":255,"score":164,"percentile":256},"2025-12-10",0.01916,{"date":258,"score":164,"percentile":259},"2025-12-11",0.01908,{"date":261,"score":164,"percentile":262},"2025-12-12",0.01914,{"date":264,"score":164,"percentile":265},"2025-12-13",0.01897,{"date":267,"score":164,"percentile":268},"2025-12-14",0.01899,{"date":270,"score":164,"percentile":236},"2025-12-15",{"date":272,"score":164,"percentile":273},"2025-12-16",0.01885,{"date":275,"score":164,"percentile":276},"2025-12-17",0.01902,{"date":278,"score":211,"percentile":279},"2025-12-18",0.02123,{"date":281,"score":211,"percentile":282},"2025-12-19",0.02125,{"date":284,"score":211,"percentile":285},"2025-12-20",0.02258,{"date":287,"score":164,"percentile":288},"2025-12-21",0.02021,{"date":290,"score":164,"percentile":291},"2025-12-22",0.02018,{"date":293,"score":164,"percentile":291},"2025-12-23",{"date":295,"score":164,"percentile":296},"2025-12-24",0.02026,{"date":298,"score":164,"percentile":299},"2025-12-25",0.02033,{"date":301,"score":164,"percentile":302},"2025-12-26",0.02036,{"date":304,"score":164,"percentile":305},"2025-12-27",0.02012,{"date":307,"score":164,"percentile":302},"2025-12-28",{"date":309,"score":164,"percentile":296},"2025-12-29",{"date":311,"score":164,"percentile":312},"2025-12-30",0.0202,{"date":314,"score":315,"percentile":316},"2025-12-31",0.00017,0.03522,{"date":318,"score":315,"percentile":319},"2026-01-01",0.03601,{"date":321,"score":315,"percentile":322},"2026-01-02",0.03591,{"date":324,"score":315,"percentile":325},"2026-01-03",0.03584,{"date":327,"score":315,"percentile":328},"2026-01-04",0.03479,{"date":330,"score":315,"percentile":331},"2026-01-05",0.0346,{"date":333,"score":315,"percentile":334},"2026-01-06",0.03452,{"date":336,"score":315,"percentile":337},"2026-01-07",0.03478,{"date":339,"score":315,"percentile":340},"2026-01-08",0.03501,{"date":342,"score":315,"percentile":343},"2026-01-09",0.03511,{"date":345,"score":346,"percentile":347},"2026-01-10",0.00019,0.04401,{"date":349,"score":346,"percentile":350},"2026-01-11",0.04381,{"date":352,"score":346,"percentile":353},"2026-01-12",0.04377,{"date":355,"score":346,"percentile":356},"2026-01-13",0.04369,{"date":358,"score":346,"percentile":359},"2026-01-14",0.04412,{"date":361,"score":346,"percentile":362},"2026-01-15",0.04327,{"date":364,"score":346,"percentile":365},"2026-01-16",0.04296,{"date":367,"score":346,"percentile":368},"2026-01-17",0.04293,{"date":370,"score":346,"percentile":371},"2026-01-18",0.04274,{"date":373,"score":346,"percentile":374},"2026-01-19",0.04221,{"date":376,"score":346,"percentile":377},"2026-01-20",0.04179,{"date":379,"score":346,"percentile":380},"2026-01-21",0.04167,{"date":382,"score":346,"percentile":383},"2026-01-22",0.04165,{"date":385,"score":346,"percentile":386},"2026-01-23",0.04214,{"date":388,"score":346,"percentile":389},"2026-01-24",0.04259,{"date":391,"score":346,"percentile":392},"2026-01-25",0.04252,{"date":394,"score":346,"percentile":395},"2026-01-26",0.0424,{"date":397,"score":346,"percentile":398},"2026-01-27",0.04226,{"date":400,"score":346,"percentile":401},"2026-01-28",0.04211,{"date":403,"score":346,"percentile":404},"2026-01-29",0.04227,{"date":406,"score":346,"percentile":407},"2026-01-30",0.04231,{"date":409,"score":346,"percentile":374},"2026-01-31",{"date":411,"score":346,"percentile":412},"2026-02-01",0.04324,[414,419],{"source":117,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":415,"cvss_v4_0":9},{"baseScore":4,"baseSeverity":416,"vectorString":118,"impactScore":417,"exploitabilityScore":418},"HIGH",9.8,2.6,{"source":123,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":420,"cvss_v4_0":9},{"baseScore":4,"baseSeverity":416,"vectorString":118,"impactScore":417,"exploitabilityScore":418},[422,445],{"ecosystem":9,"name":423,"vendor":424,"product":424,"cpe_part":425,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":426},"Linux","linux","a",[427,434,437,440,443],{"version":428,"is_range":429,"range_type":117,"version_start":430,"version_start_type":431,"version_end":432,"version_end_type":433,"fixed_in":9},">= 11a347fb6cef62ce47e84b97c45f2b2497c7593b, \u003C 49b0a6ab8e528a0c1c50e37cef9b9c7c121365f2",true,"11a347fb6cef62ce47e84b97c45f2b2497c7593b","including","49b0a6ab8e528a0c1c50e37cef9b9c7c121365f2","excluding",{"version":435,"is_range":429,"range_type":117,"version_start":430,"version_start_type":431,"version_end":436,"version_end_type":433,"fixed_in":9},">= 11a347fb6cef62ce47e84b97c45f2b2497c7593b, \u003C f7447286363dc1e410bf30b87d75168f3519f9cc","f7447286363dc1e410bf30b87d75168f3519f9cc",{"version":438,"is_range":429,"range_type":117,"version_start":430,"version_start_type":431,"version_end":439,"version_end_type":433,"fixed_in":9},">= 11a347fb6cef62ce47e84b97c45f2b2497c7593b, \u003C f807a6bf2005740fa26b4f59c4a003dc966b9afd","f807a6bf2005740fa26b4f59c4a003dc966b9afd",{"version":441,"is_range":429,"range_type":117,"version_start":430,"version_start_type":431,"version_end":442,"version_end_type":433,"fixed_in":9},">= 11a347fb6cef62ce47e84b97c45f2b2497c7593b, \u003C 1bb7ff4204b6d4927e982cd256286c09ed4fd8ca","1bb7ff4204b6d4927e982cd256286c09ed4fd8ca",{"version":444,"is_range":112,"range_type":117,"version_start":444,"version_start_type":431,"version_end":444,"version_end_type":431,"fixed_in":9},"6.8",{"ecosystem":9,"name":446,"vendor":424,"product":447,"cpe_part":448,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":449},"linux kernel","linux_kernel","o",[450,454,458],{"version":451,"is_range":429,"range_type":452,"version_start":444,"version_start_type":431,"version_end":453,"version_end_type":433,"fixed_in":9},"gte6.8_lt6.12.23","cpe","6.12.23",{"version":455,"is_range":429,"range_type":452,"version_start":456,"version_start_type":431,"version_end":457,"version_end_type":433,"fixed_in":9},"gte6.13_lt6.13.11","6.13","6.13.11",{"version":459,"is_range":429,"range_type":452,"version_start":460,"version_start_type":431,"version_end":461,"version_end_type":433,"fixed_in":9},"gte6.14_lt6.14.2","6.14","6.14.2"]