CVE-2025-38330
- EPSS 0.02%
- Veröffentlicht 10.07.2025 08:15:03
- Zuletzt bearbeitet 18.11.2025 12:53:20
In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) KASAN reported out of bounds access - cs_dsp_ctl_cache_init_multiple_offsets(). The code uses mock_coeff_temp...
CVE-2025-38328
- EPSS 0.01%
- Veröffentlicht 10.07.2025 08:15:02
- Zuletzt bearbeitet 16.12.2025 17:56:47
In the Linux kernel, the following vulnerability has been resolved: jffs2: check jffs2_prealloc_raw_node_refs() result in few other places Fuzzing hit another invalid pointer dereference due to the lack of checking whether jffs2_prealloc_raw_node_r...
CVE-2025-38329
- EPSS 0.02%
- Veröffentlicht 10.07.2025 08:15:02
- Zuletzt bearbeitet 18.11.2025 12:53:30
In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info) KASAN reported out of bounds access - cs_dsp_mock_wmfw_add_info(), because the source string length was round...
CVE-2025-38327
- EPSS 0.02%
- Veröffentlicht 10.07.2025 08:15:01
- Zuletzt bearbeitet 18.11.2025 12:53:41
In the Linux kernel, the following vulnerability has been resolved: fgraph: Do not enable function_graph tracer when setting funcgraph-args When setting the funcgraph-args option when function graph tracer is net enabled, it incorrectly enables it....
CVE-2025-38326
- EPSS 0.02%
- Veröffentlicht 10.07.2025 08:15:00
- Zuletzt bearbeitet 19.12.2025 16:55:45
In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rq_list in aoedev_downdev() An aoe device's rq_list contains accepted block requests that are waiting to be transmitted to the aoe target. This queue was added as...
CVE-2025-38325
- EPSS 0.02%
- Veröffentlicht 10.07.2025 08:14:59
- Zuletzt bearbeitet 18.11.2025 12:53:49
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add free_transport ops in ksmbd connection free_transport function for tcp connection can be called from smbdirect. It will cause kernel oops. This patch add free_transport ...
CVE-2025-38323
- EPSS 0.01%
- Veröffentlicht 10.07.2025 08:14:58
- Zuletzt bearbeitet 19.12.2025 16:49:58
In the Linux kernel, the following vulnerability has been resolved: net: atm: add lec_mutex syzbot found its way in net/atm/lec.c, and found an error path in lecd_attach() could leave a dangling pointer in dev_lec[]. Add a mutex to protect dev_lec...
CVE-2025-38324
- EPSS 0.02%
- Veröffentlicht 10.07.2025 08:14:58
- Zuletzt bearbeitet 19.12.2025 16:55:13
In the Linux kernel, the following vulnerability has been resolved: mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). As syzbot reported [0], mpls_route_input_rcu() can be called from mpls_getroute(), where is under RTNL. net->mpls.platf...
CVE-2025-38321
- EPSS 0.01%
- Veröffentlicht 10.07.2025 08:14:57
- Zuletzt bearbeitet 18.11.2025 12:53:57
In the Linux kernel, the following vulnerability has been resolved: smb: Log an error when close_all_cached_dirs fails Under low-memory conditions, close_all_cached_dirs() can't move the dentries to a separate list to dput() them once the locks are...
CVE-2025-38322
- EPSS 0.03%
- Veröffentlicht 10.07.2025 08:14:57
- Zuletzt bearbeitet 19.12.2025 16:49:52
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix crash in icl_update_topdown_event() The perf_fuzzer found a hard-lockup crash on a RaptorLake machine: Oops: general protection fault, maybe for address 0xff...