CVE-2025-23161
- EPSS 0.01%
- Veröffentlicht 01.05.2025 12:55:46
- Zuletzt bearbeitet 05.11.2025 17:51:58
In the Linux kernel, the following vulnerability has been resolved: PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type The access to the PCI config space via pci_ops::read and pci_ops::write is a low-level hardware access. The functions can be ...
CVE-2025-23160
- EPSS 0.03%
- Veröffentlicht 01.05.2025 12:55:45
- Zuletzt bearbeitet 06.11.2025 21:32:32
In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization On Mediatek devices with a system companion processor (SCP) the mtk_scp structure has to...
CVE-2025-23159
- EPSS 0.02%
- Veröffentlicht 01.05.2025 12:55:44
- Zuletzt bearbeitet 05.11.2025 17:53:57
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr->buf_size is in shared memory and can be modified by malicious user. OOB write is possible when the size is made high...
CVE-2025-23158
- EPSS 0.02%
- Veröffentlicht 01.05.2025 12:55:43
- Zuletzt bearbeitet 05.11.2025 17:55:11
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add check to handle incorrect queue size qsize represents size of shared queued between driver and video firmware. Firmware can modify this value to an invalid l...
CVE-2025-23157
- EPSS 0.02%
- Veröffentlicht 01.05.2025 12:55:43
- Zuletzt bearbeitet 05.11.2025 17:56:19
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: add check to avoid out of bound access There is a possibility that init_codecs is invoked multiple times during manipulated payload from video firmware. I...
CVE-2025-23156
- EPSS 0.02%
- Veröffentlicht 01.05.2025 12:55:42
- Zuletzt bearbeitet 05.11.2025 17:57:13
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: refactor hfi packet parsing logic words_count denotes the number of words in total payload, while data points to payload of various property within it. Wh...
CVE-2025-23151
- EPSS 0.02%
- Veröffentlicht 01.05.2025 12:55:38
- Zuletzt bearbeitet 05.11.2025 17:58:11
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queue_buf A client driver may use mhi_unprepare_from_transfer() to quiesce incoming data during the client driver's tear down. The cl...
CVE-2025-23150
- EPSS 0.02%
- Veröffentlicht 01.05.2025 12:55:38
- Zuletzt bearbeitet 05.11.2025 18:03:36
In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-free issue in ext4_insert_dentry that was caused by out-of-bounds access due to incorrect splitting in do_spli...
CVE-2025-23148
- EPSS 0.02%
- Veröffentlicht 01.05.2025 12:55:36
- Zuletzt bearbeitet 05.11.2025 18:04:14
In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() soc_dev_attr->revision could be NULL, thus, a pointer check is added to prevent potential NULL pointer ...
CVE-2025-23147
- EPSS 0.03%
- Veröffentlicht 01.05.2025 12:55:36
- Zuletzt bearbeitet 05.11.2025 18:04:44
In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3c_master_queue_ibi() The I3C master driver may receive an IBI from a target device that has not been probed yet. In such cases, the master calls `i...