CVE-2025-21654
- EPSS 0.01%
- Veröffentlicht 19.01.2025 11:15:11
- Zuletzt bearbeitet 26.09.2025 19:48:53
In the Linux kernel, the following vulnerability has been resolved: ovl: support encoding fid from inode with no alias Dmitry Safonov reported that a WARN_ON() assertion can be trigered by userspace when calling inotify_show_fdinfo() for an overlay...
CVE-2025-21645
- EPSS 0.03%
- Veröffentlicht 19.01.2025 11:15:10
- Zuletzt bearbeitet 03.11.2025 20:17:08
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it Wakeup for IRQ1 should be disabled only in cases where i8042 had actually enabled it, otherwise "wake...
CVE-2025-21646
- EPSS 0.03%
- Veröffentlicht 19.01.2025 11:15:10
- Zuletzt bearbeitet 03.11.2025 21:19:00
In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes, but a problem occurs if someone actually does that: kafs tries to create...
CVE-2025-21647
- EPSS 0.02%
- Veröffentlicht 19.01.2025 11:15:10
- Zuletzt bearbeitet 03.11.2025 21:19:00
In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flow fairness counts Even though we fixed a logic error in the commit cited below, syzbot still managed to trigger an underflow of t...
CVE-2025-21648
- EPSS 0.03%
- Veröffentlicht 19.01.2025 11:15:10
- Zuletzt bearbeitet 03.11.2025 21:19:01
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: clamp maximum hashtable size to INT_MAX Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_n...
CVE-2025-21651
- EPSS 0.02%
- Veröffentlicht 19.01.2025 11:15:10
- Zuletzt bearbeitet 16.10.2025 19:22:28
In the Linux kernel, the following vulnerability has been resolved: net: hns3: don't auto enable misc vector Currently, there is a time window between misc irq enabled and service task inited. If an interrupte is reported at this time, it will caus...
CVE-2025-21653
- EPSS 0.03%
- Veröffentlicht 19.01.2025 11:15:10
- Zuletzt bearbeitet 03.11.2025 21:19:02
In the Linux kernel, the following vulnerability has been resolved: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute syzbot found that TCA_FLOW_RSHIFT attribute was not validated. Right shitfing a 32bit integer is undefined for large shift v...
CVE-2025-21643
- EPSS 0.02%
- Veröffentlicht 19.01.2025 11:15:09
- Zuletzt bearbeitet 16.10.2025 19:17:07
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel async DIO Netfslib needs to be able to handle kernel-initiated asynchronous DIO that is supplied with a bio_vec[] array. Currently, because of the async flag, th...
CVE-2025-21632
- EPSS 0.02%
- Veröffentlicht 19.01.2025 11:15:08
- Zuletzt bearbeitet 24.09.2025 16:36:25
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure shadow stack is active before "getting" registers The x86 shadow stack support has its own set of registers. Those registers are XSAVE-managed, but they are "superv...
CVE-2025-21633
- EPSS 0.02%
- Veröffentlicht 19.01.2025 11:15:08
- Zuletzt bearbeitet 20.05.2025 14:15:27
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.