InfoSecBulletin Cybersecurity for mankind
CrowdStrike has issued a security advisory for a serious TLS vulnerability, CVE-2025-1146, in its Falcon Sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor. This vulnerability could enable man-in-the-middle (MiTM) attacks.
CrowdStrike secures communications from the Falcon sensor to its cloud using standard TLS. However, a validation error in the TLS connection could let attackers intercept and modify traffic between them.
Samsung phone is saving your passwords in plain text
UK Software Firm Exposed 8 million of Healthcare Worker Records
GitHub Enterprise Server Vulns Expose Risk of Code Execution
CVE-2025-2492
ASUS warns of critical auth bypass flaw in routers
16,000+ Fortinet devices compromised with symlink backdoor, Mostly in Asia
Patch now! Critical Erlang/OTP SSH Vuln Allows UCE
CISA warns of increasing risk tied to Oracle legacy Cloud leak
CVE-2025-20236
Cisco Patches Unauthenticated RCE Flaw in Webex App
Apple released emergency security updates for 2 zero-day vulns
Oracle Released Patched for 378 flaws for April 2025
All Falcon Sensor versions for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor before version 7.21, except hotfix versions, are affected. However, Windows and Mac sensors are not impacted by this vulnerability.
CrowdStrike rated this vulnerability as 8.1 (HIGH) on the CVSS scale. There is currently no evidence of active exploitation, but users are strongly advised to update their software to reduce potential risks.
CrowdStrike has issued a security fix for all Falcon sensor versions for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor from 7.06 and above. Users are advised to update to version 7.21 or later promptly. Hotfixes for both supported and unsupported versions can be found in the Falcon console and applied through sensor update policies or direct downloads.
Organizations may be concerned about performance issues from the security update, but CrowdStrike has assured that the patch does not affect sensor performance.
Users should prioritize updating their Falcon Sensor for Linux and related components to safeguard their systems.
