CVE-2025-38193
- EPSS 0.05%
- Veröffentlicht 04.07.2025 13:37:17
- Zuletzt bearbeitet 18.12.2025 21:25:10
In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: reject invalid perturb period Gerrard Tai reported that SFQ perturb_period has no range check yet, and this can be used to trigger a race condition fixed in a s...
CVE-2025-38194
- EPSS 0.05%
- Veröffentlicht 04.07.2025 13:37:17
- Zuletzt bearbeitet 18.12.2025 21:26:58
In the Linux kernel, the following vulnerability has been resolved: jffs2: check that raw node were preallocated before writing summary Syzkaller detected a kernel bug in jffs2_link_node_ref, caused by fault injection in jffs2_prealloc_raw_node_ref...
CVE-2025-38190
- EPSS 0.05%
- Veröffentlicht 04.07.2025 13:37:15
- Zuletzt bearbeitet 18.12.2025 17:24:15
In the Linux kernel, the following vulnerability has been resolved: atm: Revert atm_account_tx() if copy_from_iter_full() fails. In vcc_sendmsg(), we account skb->truesize to sk->sk_wmem_alloc by atm_account_tx(). It is expected to be reverted by ...
CVE-2025-38191
- EPSS 0.08%
- Veröffentlicht 04.07.2025 13:37:15
- Zuletzt bearbeitet 18.12.2025 17:24:30
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in destroy_previous_session If client set ->PreviousSessionId on kerberos session setup stage, NULL pointer dereference error will happen. Since...
CVE-2025-38189
- EPSS 0.05%
- Veröffentlicht 04.07.2025 13:37:14
- Zuletzt bearbeitet 19.11.2025 20:47:42
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()` The following kernel Oops was recently reported by Mesa CI: [ 800.139824] Unable to handle kernel NULL pointer...
CVE-2025-38185
- EPSS 0.09%
- Veröffentlicht 04.07.2025 13:37:11
- Zuletzt bearbeitet 18.12.2025 16:53:27
In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Free invalid length skb in atmtcp_c_send(). syzbot reported the splat below. [0] vcc_sendmsg() copies data passed from userspace to skb and passes it to vcc->dev->ops...
CVE-2025-38180
- EPSS 0.06%
- Veröffentlicht 04.07.2025 13:37:08
- Zuletzt bearbeitet 18.12.2025 15:36:58
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev_lec[] changes. It appears it had dev_put() calls without prior dev_hold(), leading to imb...
CVE-2025-38177
- EPSS 0.09%
- Veröffentlicht 04.07.2025 12:47:09
- Zuletzt bearbeitet 18.12.2025 16:48:54
In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue(). Let's make it idempotent to ease ...
CVE-2025-38174
- EPSS 0.11%
- Veröffentlicht 04.07.2025 10:39:55
- Zuletzt bearbeitet 18.12.2025 16:46:25
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Do not double dequeue a configuration request Some of our devices crash in tb_cfg_request_dequeue(): general protection fault, probably for non-canonical address 0xd...
CVE-2025-38168
- EPSS 0.05%
- Veröffentlicht 03.07.2025 08:36:07
- Zuletzt bearbeitet 20.11.2025 19:29:30
In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Unregister PMUs on probe failure When a resource allocation fails in one clock domain of an NI device, we need to properly roll back all previously registered perf PM...