CVE-2025-38493
- EPSS 0.02%
- Veröffentlicht 28.07.2025 11:22:02
- Zuletzt bearbeitet 19.11.2025 17:46:57
In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix crash in timerlat_dump_stack() We have observed kernel panics when using timerlat with stack saving, with the following dmesg output: memcpy: detected buffer ...
CVE-2025-38492
- EPSS 0.02%
- Veröffentlicht 28.07.2025 11:22:01
- Zuletzt bearbeitet 19.11.2025 17:46:50
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix race between cache write completion and ALL_QUEUED being set When netfslib is issuing subrequests, the subrequests start processing immediately and may complete before w...
CVE-2025-38491
- EPSS 0.03%
- Veröffentlicht 28.07.2025 11:21:59
- Zuletzt bearbeitet 12.05.2026 13:16:51
In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 __mptcp_do_fallback net/m...
CVE-2025-38490
- EPSS 0.03%
- Veröffentlicht 28.07.2025 11:21:54
- Zuletzt bearbeitet 19.11.2025 17:46:10
In the Linux kernel, the following vulnerability has been resolved: net: libwx: remove duplicate page_pool_put_full_page() page_pool_put_full_page() should only be invoked when freeing Rx buffers or building a skb if the size is too short. At other...
CVE-2025-38489
- EPSS 0.02%
- Veröffentlicht 28.07.2025 11:21:53
- Zuletzt bearbeitet 19.11.2025 17:45:54
In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again Commit 7ded842b356d ("s390/bpf: Fix bpf_plt pointer arithmetic") has accidentally removed the critical piece of commi...
CVE-2025-38488
- EPSS 0.02%
- Veröffentlicht 28.07.2025 11:21:52
- Zuletzt bearbeitet 07.01.2026 16:26:11
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from crypt_message(), assuming all crypto opera...
CVE-2025-38487
- EPSS 0.03%
- Veröffentlicht 28.07.2025 11:21:51
- Zuletzt bearbeitet 07.01.2026 16:26:03
In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled Mitigate e.g. the following: # echo 1e789080.lpc-snoop > /sys/bus/platform/drivers/aspeed-lpc-snoop/unbind ...
CVE-2025-38486
- EPSS 0.03%
- Veröffentlicht 28.07.2025 11:21:50
- Zuletzt bearbeitet 19.11.2025 17:45:46
In the Linux kernel, the following vulnerability has been resolved: soundwire: Revert "soundwire: qcom: Add set_channel_map api support" This reverts commit 7796c97df6b1b2206681a07f3c80f6023a6593d5. This patch broke Dragonboard 845c (sdm845). I se...
CVE-2025-38485
- EPSS 0.03%
- Veröffentlicht 28.07.2025 11:21:49
- Zuletzt bearbeitet 07.01.2026 16:25:52
In the Linux kernel, the following vulnerability has been resolved: iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush fxls8962af_fifo_flush() uses indio_dev->active_scan_mask (with iio_for_each_active_channel()) without making sur...
CVE-2025-38484
- EPSS 0.02%
- Veröffentlicht 28.07.2025 11:21:48
- Zuletzt bearbeitet 19.11.2025 17:37:19
In the Linux kernel, the following vulnerability has been resolved: iio: backend: fix out-of-bound write The buffer is set to 80 character. If a caller write more characters, count is truncated to the max available space in "simple_write_to_buffer"...