CVE-2025-38459
- EPSS 0.17%
- Veröffentlicht 25.07.2025 16:15:31
- Zuletzt bearbeitet 22.12.2025 21:50:30
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix infinite recursive call of clip_push(). syzbot reported the splat below. [0] This happens if we call ioctl(ATMARP_MKIP) more than once. During the first call, clip...
CVE-2025-38460
- EPSS 0.17%
- Veröffentlicht 25.07.2025 16:15:31
- Zuletzt bearbeitet 30.07.2026 06:23:15
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix potential null-ptr-deref in to_atmarpd(). atmarpd is protected by RTNL since commit f3a0592b37b8 ("[ATM]: clip causes unregister hang"). However, it is not enough b...
CVE-2025-38448
- EPSS 0.12%
- Veröffentlicht 25.07.2025 16:15:30
- Zuletzt bearbeitet 22.12.2025 21:53:51
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix race condition in TTY wakeup A race condition occurs when gs_start_io() calls either gs_start_rx() or gs_start_tx(), as those functions briefly drop the ...
CVE-2025-38449
- EPSS 0.16%
- Veröffentlicht 25.07.2025 16:15:30
- Zuletzt bearbeitet 30.07.2026 06:23:14
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer. This leads to the release of ...
CVE-2025-38437
- EPSS 0.37%
- Veröffentlicht 25.07.2025 16:15:29
- Zuletzt bearbeitet 30.07.2026 06:23:14
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbd_iov_pin_rsp return error, use-after-free can happen by accessing opinfo->state and opinfo_put and ksmbd_fd_pu...
CVE-2025-38438
- EPSS 0.16%
- Veröffentlicht 25.07.2025 16:15:29
- Zuletzt bearbeitet 19.11.2025 18:09:51
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. sof_pdata->tplg_filename can have address allocated by kstrdup() and can be overwritten. Memory leak was detected with k...
CVE-2025-38440
- EPSS 0.12%
- Veröffentlicht 25.07.2025 16:15:29
- Zuletzt bearbeitet 30.07.2026 06:23:14
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race between DIM disable and net_dim() There's a race between disabling DIM and NAPI callbacks using the dim pointer on the RQ or SQ. If NAPI checks the DIM state b...
CVE-2025-38436
- EPSS 0.13%
- Veröffentlicht 25.07.2025 15:15:29
- Zuletzt bearbeitet 18.04.2026 09:16:10
In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job When an entity from application B is killed, drm_sched_entity_kill() removes all jobs belonging to that entity through drm_sched...
CVE-2025-38422
- EPSS 0.17%
- Veröffentlicht 25.07.2025 15:15:27
- Zuletzt bearbeitet 30.07.2026 06:23:13
In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices Maximum OTP and EEPROM size for hearthstone PCI1xxxx devices are 8 Kb and 64 Kb respectively. Adjust max size defi...
CVE-2025-38424
- EPSS 0.18%
- Veröffentlicht 25.07.2025 15:15:27
- Zuletzt bearbeitet 30.07.2026 06:23:13
In the Linux kernel, the following vulnerability has been resolved: perf: Fix sample vs do_exit() Baisheng Gao reported an ARM64 crash, which Mark decoded as being a synchronous external abort -- most likely due to trying to access MMIO in bad ways...