{"vulnerability": "cve-2025-0305", "sightings": [{"uuid": "356c6af4-82ec-40aa-8121-6111cc463df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0305", "type": "seen", "source": "https://bsky.app/profile/dusk-services.bsky.social/post/3mld7madfxm2a", "content": "Three days later, researchers published details of CVE-2025-0305, a use-after-free vulnerability in the Linux kernel's io_uring subsystem. The flaw affects virtually every distribution running kernel versions 5.10 through 6.13, granting unprivileged local users the ability to escalate to root.", "creation_timestamp": "2026-05-08T07:32:00.102751Z"}, {"uuid": "c27f8586-60aa-448a-ace5-d5f2c9ccc2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0305", "type": "seen", "source": "https://bsky.app/profile/dusk-services.bsky.social/post/3mld7mb7uwa2u", "content": "An attacker with access to a machine running local inference\u2014through a compromised application, a shared development server, or even a malicious model file\u2014could exploit CVE-2025-0305 to own the entire system.", "creation_timestamp": "2026-05-08T07:32:00.864215Z"}, {"uuid": "3694a650-f068-428e-b2af-059c3e9f4f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0305", "type": "seen", "source": "https://bsky.app/profile/dusk-services.bsky.social/post/3mld7mc5gcm2w", "content": "They run stable LTS distributions specifically to avoid surprises. CVE-2025-0305 lived unpatched on LTS kernels for months because the vulnerability window opened after those versions shipped. Local inference adoption just put production workloads onto systems with known root exploits.", "creation_timestamp": "2026-05-08T07:32:01.626786Z"}, {"uuid": "6130b583-464b-428e-9596-eb25b294b216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0305", "type": "seen", "source": "https://bsky.app/profile/dusk-services.bsky.social/post/3mld7md2b5u2w", "content": "The cost savings from skipping API fees evaporate quickly if you're rebuilding security practices from scratch. The collision between ds4 and CVE-2025-0305 is a warning shot.", "creation_timestamp": "2026-05-08T07:32:02.439846Z"}]}