CVE-2025-38403
- EPSS 0.04%
- Veröffentlicht 25.07.2025 14:15:31
- Zuletzt bearbeitet 23.12.2025 19:42:42
In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transport_packet_init memset the vmci_transport_packet before populating the fields to avoid any u...
CVE-2025-38404
- EPSS 0.04%
- Veröffentlicht 25.07.2025 14:15:31
- Zuletzt bearbeitet 23.12.2025 19:43:20
In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock The deadlock can occur due to a recursive lock acquisition of `cros_typec_altmode_data::mutex`. The call chain is as follows: 1. cro...
CVE-2025-38396
- EPSS 0.03%
- Veröffentlicht 25.07.2025 13:15:29
- Zuletzt bearbeitet 23.12.2025 19:36:33
In the Linux kernel, the following vulnerability has been resolved: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass Export anon_inode_make_secure_inode() to allow KVM guest_memfd to create anonymous inodes with proper securit...
CVE-2025-38397
- EPSS 0.02%
- Veröffentlicht 25.07.2025 13:15:29
- Zuletzt bearbeitet 19.11.2025 19:12:48
In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in virtme-ng, I get the following "suspicious RCU usage" warning in nvme_mpath_add_sysfs_link(): ...
CVE-2025-38398
- EPSS 0.02%
- Veröffentlicht 25.07.2025 13:15:29
- Zuletzt bearbeitet 19.11.2025 18:18:07
In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: reallocate BAM transactions Using the mtd_nandbiterrs module for testing the driver occasionally results in weird things like below. 1. swiotlb mapping fails ...
CVE-2025-38399
- EPSS 0.04%
- Veröffentlicht 25.07.2025 13:15:29
- Zuletzt bearbeitet 23.12.2025 19:37:00
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() The function core_scsi3_decode_spec_i_port(), in its error code path, unconditionally calls core_scsi3...
CVE-2025-38400
- EPSS 0.04%
- Veröffentlicht 25.07.2025 13:15:29
- Zuletzt bearbeitet 23.12.2025 19:23:29
In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. syzbot reported a warning below [1] following a fault injection in nfs_fs_proc_net_init(). [0] When nfs_fs_proc_...
CVE-2025-38401
- EPSS 0.04%
- Veröffentlicht 25.07.2025 13:15:29
- Zuletzt bearbeitet 23.12.2025 19:37:56
In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to map the DMA region, the request is not prepared for data receiving, but msdc_start_data() pro...
CVE-2025-38402
- EPSS 0.01%
- Veröffentlicht 25.07.2025 13:15:29
- Zuletzt bearbeitet 19.11.2025 18:18:14
In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported Returning -EOPNOTSUPP from function returning u32 is leading to cast and invalid size value as a result. -EOPNOTSUPP as a size pro...
CVE-2025-38387
- EPSS 0.01%
- Veröffentlicht 25.07.2025 13:15:28
- Zuletzt bearbeitet 16.12.2025 20:12:23
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert The obj_event may be loaded immediately after inserted, then if the list_head is not initialized then we may get a po...