Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

kernel

Red Hat has issued a security advisory for a kernel update addressing multiple vulnerabilities in the Linux kernel used in Red Hat Enterprise Linux 9.4 Extended Update Support. The update fixes 11 distinct security issues including race conditions, overflows, use-after-free, uninitialized value access, null dereferences, and out-of-bounds writes across various kernel subsystems such as Bluetooth, ARP, netfilter, DRM, mlxsw, IPv4/IPv6 networking, SCSI, and ARM64 cacheinfo. The update requires a system reboot to take effect.

This Red Hat security advisory (RHSA-2025:3215) addresses 11 vulnerabilities in the Linux kernel packages for Red Hat Enterprise Linux 9.4 Extended Update Support. The fixed issues include a race condition in Bluetooth connection info age setters (CVE-2024-24857), an overflow in ARP request handling (CVE-2024-26733), protection against bitmap length out of range in netfilter H323 connection tracking (CVE-2024-26851), conditional creation of debugfs entries in DRM vmwgfx (CVE-2024-26940), a use-after-free during rehash in mlxsw spectrum ACL TCAM (CVE-2024-35854), uninitialized value access in IPv4 skb creation (CVE-2024-36927), memcpy field-spanning write warning in SCSI mpi3mr (CVE-2024-36920), null pointer dereference prevention in IPv6 output (CVE-2024-36901), signed offset passing in ftruncate (CVE-2024-42084), protection against mispredictions in do_dup2 fd fetch (CVE-2024-42265), and out-of-bounds write avoidance in ARM64 cacheinfo array (CVE-2025-21785). These fixes improve kernel stability and security by addressing memory corruption, race conditions, and input validation issues.

Detailed information about Red Hat Security Advisory: kernel security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical detail

Red Hat Security Advisory: kernel security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:3215

https://access.redhat.com/security/updates/classification/#important

2266247

2273247

2275750

2278218

2281253

2284500

2284515

2284634

2300533

2348630

Canonical URL

Red Hat Security Advisory: kernel security update

kernel-rt

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions cache. Fix this by incrementing the index for any populated leaf (instead of any populated level).

The kernel-rt packages for Red Hat Enterprise Linux 8, which provide a Real Time Linux Kernel for high determinism systems, contain a vulnerability identified as CVE-2025-21785. This vulnerability is an out-of-bounds write to the cacheinfo array on arm64 architectures, classified under CWE-787. Red Hat Product Security has issued an important security advisory (RHSA-2025:3264) and released updated kernel-rt packages to address this issue. The update requires a system reboot to be effective.

Detailed information about Red Hat Security Advisory: kernel-rt security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical det

Red Hat Security Advisory: kernel-rt security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:3127

Linux aws: In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that… (CVE-2025-21785)


Red Hat Security Advisory: kernel security updateCVE-2024-24857 0 Red Hat has issued a security advisory for a kernel update addressing multiple vulnerabilities in the Linux kernel used in Red Hat Enterprise Linux 9.4 Extended Update Support. The update fixes 11 distinct security issues including race conditions, overflows, use-after-free, uninitialized value access, null dereferences, and out-of-bounds writes across various kernel subsystems such as Bluetooth, ARP, netfilter, DRM, mlxsw, IPv4/IPv6 networking, SCSI, and ARM64 cacheinfo. The update requires a system reboot to take effect. HighVulnerability#gcve #csaf #cve-2024-24857 Join the discussion	GCVE Database	03/26/2025, 02:23:26 UTC Added: 06/25/2026, 21:47:03 UTC
Linux aws: In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that… (CVE-2025-21785)CVE-2025-21785 0 In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions cache. Fix this by incrementing the index for any populated leaf (instead of any populated level). LowVulnerability#gcve #csaf #cve-2025-21785 Join the discussion	GCVE Database	02/27/2025, 03:15:00 UTC Added: 06/25/2026, 21:47:02 UTC

Threats Tagged 'cve-2025-21785'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-21785'

Lead Pen Test Professional