NVD disclosure day

Published threat advisories for November 24, 2025

CVE-2025-12977

Fluent Bit input plugins allow tag manipulation for routing and filename control.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Fluent Bit input plugins fail to sanitize tag inputs, allowing attackers to inject special characters. This can lead to newline injection, path traversal, forged record injection, or log misrouting, impacting data integrity and log routing. Ensure your environment does not use these plugins or is not exposed to malicio

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2025-40212

Linux Kernel NFS Refcount Leak Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the Linux kernel's NFS server could allow a denial of service if a client sends a malformed filehandle. This is unlikely in normal usage, as it requires a client to deliberately synthesize an incorrect filehandle.

NVD modified: NVD date unavailable