CVE-2025-37785
- EPSS 0.06%
- Veröffentlicht 18.04.2025 07:01:27
- Zuletzt bearbeitet 03.11.2025 20:18:34
In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' dir entry with rec_len == block size results in out-of-bounds read (la...
CVE-2021-47670
- EPSS 0.07%
- Veröffentlicht 17.04.2025 18:01:30
- Zuletzt bearbeitet 21.04.2025 18:41:16
In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix use after free bugs After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after...
CVE-2021-47668
- EPSS 0.06%
- Veröffentlicht 17.04.2025 18:01:29
- Zuletzt bearbeitet 21.04.2025 18:41:27
In the Linux kernel, the following vulnerability has been resolved: can: dev: can_restart: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after t...
CVE-2021-47669
- EPSS 0.06%
- Veröffentlicht 17.04.2025 18:01:29
- Zuletzt bearbeitet 21.04.2025 18:41:22
In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the canfd_frame cfd which aliases skb memory is accessed aft...
CVE-2020-36789
- EPSS 0.06%
- Veröffentlicht 17.04.2025 18:01:28
- Zuletzt bearbeitet 01.10.2025 17:15:31
In the Linux kernel, the following vulnerability has been resolved: can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context If a driver calls can_get_echo_skb() during a hardware IRQ (which is often, but not always, the case),...
CVE-2025-23138
- EPSS 0.12%
- Veröffentlicht 16.04.2025 14:13:17
- Zuletzt bearbeitet 04.11.2025 17:00:09
In the Linux kernel, the following vulnerability has been resolved: watch_queue: fix pipe accounting mismatch Currently, watch_queue_set_size() modifies the pipe buffers charged to user->pipe_bufs without updating the pipe->nr_accounted on the pipe...
CVE-2025-23136
- EPSS 0.1%
- Veröffentlicht 16.04.2025 14:13:16
- Zuletzt bearbeitet 03.11.2025 20:17:44
In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode, so adev might be NULL. This is similar to the commit cd2fd6eab480 ("platform/x86: int3472: ...
CVE-2025-23131
- EPSS 0.09%
- Veröffentlicht 16.04.2025 14:13:13
- Zuletzt bearbeitet 04.11.2025 17:01:32
In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to event_done do_uevent returns the value written to event_done. In case it is a positive value, new_lockspace would undo all the wor...
CVE-2025-23132
- EPSS 0.11%
- Veröffentlicht 16.04.2025 14:13:13
- Zuletzt bearbeitet 04.11.2025 17:01:21
In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix to avoid warning in dquot_writeback_dquots() F2FS-fs (dm-59): checkpoint=enable has some unwritten data. ------------[ cut here ]------------ WARNING: CPU: 6 PID:...
CVE-2025-23130
- EPSS 0.06%
- Veröffentlicht 16.04.2025 14:13:12
- Zuletzt bearbeitet 04.11.2025 17:04:06
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic once fallocation fails for pinfile syzbot reports a f2fs bug as below: ------------[ cut here ]------------ kernel BUG at fs/f2fs/segment.c:2746! CPU: 0 U...