CVE-2025-37946
- EPSS 0.01%
- Veröffentlicht 20.05.2025 16:15:32
- Zuletzt bearbeitet 17.11.2025 12:57:23
In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs With commit bcb5d6c76903 ("s390/pci: introduce lock to synchronize state of zpci_dev's") the code to i...
CVE-2025-37947
- EPSS 0.01%
- Veröffentlicht 20.05.2025 16:15:32
- Zuletzt bearbeitet 03.11.2025 20:18:42
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfs_stream_write() did not validate whether the write offset (*pos) was within the bounds of the existing stream...
CVE-2025-37948
- EPSS 0.03%
- Veröffentlicht 20.05.2025 16:15:32
- Zuletzt bearbeitet 18.12.2025 20:57:12
In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen nex...
CVE-2025-37949
- EPSS 0.03%
- Veröffentlicht 20.05.2025 16:15:32
- Zuletzt bearbeitet 17.12.2025 20:05:13
In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the xenbus_thread callstack: BUG: kernel NULL pointer dereference, address: 0000000000000000 RI...
CVE-2025-37944
- EPSS 0.01%
- Veröffentlicht 20.05.2025 15:58:20
- Zuletzt bearbeitet 17.11.2025 12:57:39
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process Currently, ath12k_dp_mon_srng_process uses ath12k_hal_srng_src_get_next_entry to fetch the next entry from the d...
CVE-2025-37945
- EPSS 0.02%
- Veröffentlicht 20.05.2025 15:58:20
- Zuletzt bearbeitet 17.11.2025 12:57:32
In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DSA has 2 kinds of drivers: 1. Those who call dsa_switch_suspend() and dsa_switch_resume() f...
CVE-2025-37943
- EPSS 0.02%
- Veröffentlicht 20.05.2025 15:58:19
- Zuletzt bearbeitet 17.11.2025 12:57:46
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi In certain cases, hardware might provide packets with a length greater than the maximum native Wi-Fi header le...
CVE-2025-37941
- EPSS 0.02%
- Veröffentlicht 20.05.2025 15:58:18
- Zuletzt bearbeitet 17.11.2025 12:58:01
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() When snd_soc_dapm_new_controls() or snd_soc_dapm_add_routes() fails, wcd937x_soc_codec_probe() retur...
CVE-2025-37942
- EPSS 0.01%
- Veröffentlicht 20.05.2025 15:58:18
- Zuletzt bearbeitet 17.11.2025 12:57:54
In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX As noted by Anssi some 20 years ago, pool report is sometimes messed up. This worked fine on many devices but c...
CVE-2025-37940
- EPSS 0.01%
- Veröffentlicht 20.05.2025 15:58:17
- Zuletzt bearbeitet 19.12.2025 17:44:15
In the Linux kernel, the following vulnerability has been resolved: ftrace: Add cond_resched() to ftrace_graph_set_hash() When the kernel contains a large number of functions that can be traced, the loop in ftrace_graph_set_hash() may take a lot of...