<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>CVE Daily – Rocky Linux</title>
  <link>https://cvedaily.com/pages/tags/rocky-linux.html</link>
  <atom:link href="https://cvedaily.com/feed-tags/rocky-linux.xml" rel="self" type="application/rss+xml"/>
  <description>CVE Daily – Rocky Linux</description>
  <language>en</language>
  <lastBuildDate>Wed, 03 Jun 2026 21:27:05 +0000</lastBuildDate>
  <item>
    <title>[Medium] CVE-2025-53013 – Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune...</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2025-53013</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2025-53013</guid>
    <pubDate>Thu, 26 Jun 2025 18:15:23 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk medium">Medium</span> CVE-2025-53013</strong></p>
  <p>Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9.10 through 0.9.16 allows a user to authenticate to a Linux host via Himmelblau using an *invalid* Linux Hello PIN, provided the host is offline. While the user gains access to the local system, Single Sign-On (SSO) fails due to the network being down and the inability to issue…</p>
  <p><strong>CVSS:</strong> 5.2 · <strong>CWE:</strong> CWE-287</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-53013">View on NVD</a></p>
]]>
    </description>
  </item>
  <item>
    <title>[Medium] CVE-2022-49003 – In the Linux kernel, the following vulnerability has been resolved:

nvme: fix S...</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2022-49003</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2022-49003</guid>
    <pubDate>Mon, 21 Oct 2024 20:15:11 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk medium">Medium</span> CVE-2022-49003</strong></p>
  <p>In the Linux kernel, the following vulnerability has been resolved:  nvme: fix SRCU protection of nvme_ns_head list  Walking the nvme_ns_head siblings list is protected by the head's srcu in nvme_ns_head_submit_bio() but not nvme_mpath_revalidate_paths(). Removing namespaces from the list also fails to synchronize the srcu. Concurrent scan work can therefore cause use-after-frees.  Hold the head'…</p>
  <p><strong>CVSS:</strong> 4.7 · <strong>CWE:</strong> CWE-416</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-49003">View on NVD</a></p>
]]>
    </description>
  </item>
</channel>
</rss>
