Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface.

CVE-2025-23259 is a medium severity vulnerability identified in the NVIDIA Mellanox Data Plane Development Kit (DPDK) version 22.11 and earlier. The vulnerability stems from a race condition (CWE-362) in the Poll Mode Driver (PMD) component of the Mellanox DPDK. Specifically, improper synchronization when accessing shared resources allows concurrent execution issues. An attacker with access to a virtual machine (VM) on the affected system could exploit this flaw to cause information disclosure and denial of service (DoS) on the network interface. The race condition may lead to inconsistent or corrupted data being processed or exposed, potentially leaking sensitive information traversing the network interface. Additionally, the attacker could disrupt network operations by triggering a DoS, impacting availability. The vulnerability requires network-level access (AV:N) but no privileges (PR:N) or user interaction (UI:N). However, the attack complexity is high (AC:H), indicating exploitation is non-trivial. The scope is unchanged (S:U), meaning the impact is limited to the vulnerable component without affecting other system components. The CVSS v3.1 base score is 6.5, reflecting a medium severity rating primarily due to the potential for availability impact and limited confidentiality loss. No known exploits are currently reported in the wild, and no official patches have been linked yet, though the affected versions are all prior to 22.11_2504.1.0, suggesting a fixed version exists or is forthcoming. This vulnerability is significant in environments using Mellanox DPDK for high-performance packet processing, especially in virtualized infrastructures where multiple VMs share network resources.

Detailed information about CVE-2025-23259: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in NVIDIA Mellano

CVE-2025-23259: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in NVIDIA Mellanox DPDK 22.11 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-23259: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in NVIDIA Mellanox DPDK 22.11

Threats Tagged 'cve-2025-23259'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-23259'

Lead Pen Test Professional