Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

linux-hwe-edge

linux-aws-5.0

linux-aws-5.3

linux-azure

linux-azure-5.3

linux-azure-edge

linux-gcp

linux-gcp-5.3

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-aws-5.11

linux-aws-5.13

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.8

linux-azure-fde

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.8

linux-gke

linux-gke-5.15

linux-gkeop

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.8

linux-intel-5.13

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.8

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.8

linux-allwinner-5.19

linux-aws-5.19

linux-aws-6.2

linux-aws-6.5

linux-aws-6.8

linux-azure-5.19

linux-azure-6.2

linux-azure-6.5

linux-azure-6.8

linux-azure-fde-5.19

linux-azure-fde-6.2

linux-azure-fde-6.8

linux-gcp-5.19

linux-gcp-6.2

linux-gcp-6.5

linux-gcp-6.8

linux-hwe-5.19

linux-hwe-6.2

linux-hwe-6.5

linux-hwe-6.8

linux-ibm-6.8

linux-intel-iot-realtime

linux-lowlatency-hwe-5.19

linux-lowlatency-hwe-6.2

linux-lowlatency-hwe-6.5

linux-lowlatency-hwe-6.8

linux-nvidia-6.2

linux-nvidia-6.5

linux-nvidia-6.8

linux-oem-5.17

linux-oem-6.0

linux-oem-6.1

linux-oem-6.5

linux-oracle-6.5

linux-oracle-6.8

linux-realtime

linux-riscv-5.19

linux-riscv-6.5

linux-riscv-6.8

linux-starfive-5.19

linux-starfive-6.2

linux-starfive-6.5

linux-realtime-6.8

linux

linux-aws

linux-aws-6.14

linux-azure-6.11

linux-azure-nvidia

linux-gcp-6.11

linux-gcp-6.14

A memory leak vulnerability (CVE-2025-37962) was identified and fixed in the Linux kernel's ksmbd component, specifically in the parse_lease_state() function. The issue was introduced by a previous patch that added bounds checking but failed to free allocated memory when the check failed. This flaw could lead to resource exhaustion. The vulnerability is addressed in a Linux kernel update that fixes this and multiple other security issues across various subsystems. Users are advised to update to the fixed kernel versions and reboot their systems. The update requires recompilation of third-party kernel modules due to ABI changes.

CVE-2025-37962 describes a memory leak in the Linux kernel's ksmbd SMB network file system component. The leak occurs in the parse_lease_state() function when a bounds check for creating a lease context fails; the function returns NULL without freeing the previously allocated lease_ctx_info structure. This patch corrects the issue by ensuring kfree(lreq) is called before returning NULL in failure cases. The vulnerability is part of a broader set of Linux kernel security fixes affecting multiple subsystems and architectures. The vendor advisory from Ubuntu confirms the availability of patches in Linux kernel version 6.14.0-28.28 and related HWE and OEM kernel packages. Users must update and reboot to apply the fixes, and recompile third-party kernel modules due to ABI changes.

Detailed information about Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The

Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The previous patch that added… (CVE-2025-37962) - Live Threat Intelligence - Threat Radar | OffSeq.com

Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The previous patch that added… (CVE-2025-37962)

Threats Tagged 'ubuntu-cve-2025-37962'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ubuntu-cve-2025-37962'

Lead Pen Test Professional