A vulnerability classified as critical has been found in Linux Kernel up to 6.1.158/6.6.116/6.12.57/6.17.7. This impacts the function hci_cmd_complete_evt of the component Bluetooth. The manipulation leads to privilege escalation.
This vulnerability is traded as CVE-2025-40301. Access to the local network is required for this attack to succeed. There is no exploit available.
It is recommended to upgrade the affected component.
Ransomware payments reported to FinCEN exceeded $4.5B by 2024, with 2023 marking a record year at $1.1B across 1,512 incidents. FinCEN analyzed ransomware trends using Bank Secrecy Act (BSA) reports filed from January 2022 to February 2025. During this period, organizations reported 4,194 ransomware incidents and more than $2.1 billion in payments. For comparison, from […]
A vulnerability was found in Google Android kernel. It has been classified as critical. The affected element is the function __pkvm_load_tracing of the file trace.c. Performing manipulation results in out-of-bounds write.
This vulnerability is reported as CVE-2025-48638. The attack requires a local approach. No exploit exists.
A vulnerability classified as critical has been found in Google Android 13/14/15/16. This vulnerability affects unknown code of the file DefaultTransitionHandler.java. The manipulation leads to permission issues.
This vulnerability is referenced as CVE-2025-48639. The attack can only be performed from a local environment. No exploit is available.