CVE-2025-38618
- EPSS 0.02%
- Veröffentlicht 22.08.2025 13:01:24
- Zuletzt bearbeitet 07.01.2026 16:56:23
In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound soc...
CVE-2025-38617
- EPSS 0.05%
- Veröffentlicht 22.08.2025 13:01:23
- Zuletzt bearbeitet 18.03.2026 17:16:04
In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring() releases po->bind_lock, another thread can run packet_notifier() and process an NETDEV_UP e...
CVE-2025-38614
- EPSS 0.03%
- Veröffentlicht 19.08.2025 17:15:40
- Zuletzt bearbeitet 12.05.2026 13:16:52
In the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EP_MAX_NESTS+1 links. Currently, ep_loop_check_proc() ensures that the graph...
- EPSS 0.04%
- Veröffentlicht 19.08.2025 17:15:39
- Zuletzt bearbeitet 05.09.2025 20:15:34
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-38602
- EPSS 0.02%
- Veröffentlicht 19.08.2025 17:15:38
- Zuletzt bearbeitet 07.01.2026 18:38:47
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Add missing check for alloc_ordered_workqueue Add check for the return value of alloc_ordered_workqueue since it may return NULL pointer.
CVE-2025-38604
- EPSS 0.02%
- Veröffentlicht 19.08.2025 17:15:38
- Zuletzt bearbeitet 07.01.2026 18:36:24
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Kill URBs before clearing tx status queue In rtl8187_stop() move the call of usb_kill_anchored_urbs() before clearing b_tx_status.queue. This change prevents callbac...
CVE-2025-38584
- EPSS 0.03%
- Veröffentlicht 19.08.2025 17:15:35
- Zuletzt bearbeitet 17.05.2026 16:16:14
In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in padata_reorder that goes back to the initial commit. A reference count is taken at the start of the process in...
CVE-2025-38572
- EPSS 0.02%
- Veröffentlicht 19.08.2025 17:15:34
- Zuletzt bearbeitet 09.01.2026 13:53:12
In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6_gso_segment() syzbot was able to craft a packet with very long IPv6 extension headers leading to an overflow of skb->transport_header. This ...
CVE-2025-38574
- EPSS 0.02%
- Veröffentlicht 19.08.2025 17:15:34
- Zuletzt bearbeitet 09.01.2026 14:39:04
In the Linux kernel, the following vulnerability has been resolved: pptp: ensure minimal skb length in pptp_xmit() Commit aabc6596ffb3 ("net: ppp: Add bound checking for skb data on ppp_sync_txmung") fixed ppp_sync_txmunge() We need a similar fix ...
CVE-2025-38576
- EPSS 0.03%
- Veröffentlicht 19.08.2025 17:15:34
- Zuletzt bearbeitet 09.01.2026 14:15:23
In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the s...