CVE-2025-21647
- EPSS 0.07%
- Veröffentlicht 19.01.2025 11:15:10
- Zuletzt bearbeitet 03.11.2025 21:19:00
In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of t...
CVE-2025-21648
- EPSS 0.06%
- Veröffentlicht 19.01.2025 11:15:10
- Zuletzt bearbeitet 03.11.2025 21:19:01
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: clamp maximum hashtable size to INT_MAX Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_n...
CVE-2025-21651
- EPSS 0.02%
- Veröffentlicht 19.01.2025 11:15:10
- Zuletzt bearbeitet 16.10.2025 19:22:28
In the Linux kernel, the following vulnerability has been resolved: net: hns3: don't auto enable misc vector Currently, there is a time window between misc irq enabled and service task inited. If an interrupte is reported at this time, it will caus...
CVE-2025-21653
- EPSS 0.06%
- Veröffentlicht 19.01.2025 11:15:10
- Zuletzt bearbeitet 03.11.2025 21:19:02
In the Linux kernel, the following vulnerability has been resolved: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute syzbot found that TCA_FLOW_RSHIFT attribute was not validated. Right shitfing a 32bit integer is undefined for large shift v...
CVE-2025-21643
- EPSS 0.04%
- Veröffentlicht 19.01.2025 11:15:09
- Zuletzt bearbeitet 16.10.2025 19:17:07
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel async DIO Netfslib needs to be able to handle kernel-initiated asynchronous DIO that is supplied with a bio_vec[] array. Currently, because of the async flag, th...
CVE-2025-21632
- EPSS 0.03%
- Veröffentlicht 19.01.2025 11:15:08
- Zuletzt bearbeitet 24.09.2025 16:36:25
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure shadow stack is active before "getting" registers The x86 shadow stack support has its own set of registers. Those registers are XSAVE-managed, but they are "superv...
CVE-2025-21633
- EPSS 0.02%
- Veröffentlicht 19.01.2025 11:15:08
- Zuletzt bearbeitet 20.05.2025 14:15:27
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-21629
- EPSS 0.04%
- Veröffentlicht 15.01.2025 13:15:15
- Zuletzt bearbeitet 03.11.2025 21:18:58
In the Linux kernel, the following vulnerability has been resolved: net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets The blamed commit disabled hardware offoad of IPv6 packets with extension headers on devices that advertise NETIF_F_IPV6...
CVE-2024-57897
- EPSS 0.05%
- Veröffentlicht 15.01.2025 13:15:14
- Zuletzt bearbeitet 03.11.2025 21:18:39
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Correct the migration DMA map direction The SVM DMA device map direction should be set the same as the DMA unmap setting, otherwise the DMA core will report the followi...
CVE-2024-57898
- EPSS 0.03%
- Veröffentlicht 15.01.2025 13:15:14
- Zuletzt bearbeitet 17.10.2025 16:11:24
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear link ID from bitmap during link delete after clean up Currently, during link deletion, the link ID is first removed from the valid_links bitmap before perform...