CVE-2025-38191
- EPSS 0.08%
- Veröffentlicht 04.07.2025 13:37:15
- Zuletzt bearbeitet 18.12.2025 17:24:30
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in destroy_previous_session If client set ->PreviousSessionId on kerberos session setup stage, NULL pointer dereference error will happen. Since...
CVE-2025-38189
- EPSS 0.05%
- Veröffentlicht 04.07.2025 13:37:14
- Zuletzt bearbeitet 19.11.2025 20:47:42
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()` The following kernel Oops was recently reported by Mesa CI: [ 800.139824] Unable to handle kernel NULL pointer...
CVE-2025-38185
- EPSS 0.09%
- Veröffentlicht 04.07.2025 13:37:11
- Zuletzt bearbeitet 18.12.2025 16:53:27
In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Free invalid length skb in atmtcp_c_send(). syzbot reported the splat below. [0] vcc_sendmsg() copies data passed from userspace to skb and passes it to vcc->dev->ops...
CVE-2025-38180
- EPSS 0.06%
- Veröffentlicht 04.07.2025 13:37:08
- Zuletzt bearbeitet 18.12.2025 15:36:58
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev_lec[] changes. It appears it had dev_put() calls without prior dev_hold(), leading to imb...
CVE-2025-38177
- EPSS 0.09%
- Veröffentlicht 04.07.2025 12:47:09
- Zuletzt bearbeitet 18.12.2025 16:48:54
In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: make hfsc_qlen_notify() idempotent hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue(). Let's make it idempotent to ease ...
CVE-2025-38174
- EPSS 0.11%
- Veröffentlicht 04.07.2025 10:39:55
- Zuletzt bearbeitet 18.12.2025 16:46:25
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Do not double dequeue a configuration request Some of our devices crash in tb_cfg_request_dequeue(): general protection fault, probably for non-canonical address 0xd...
CVE-2025-38173
- EPSS 0.11%
- Veröffentlicht 03.07.2025 08:36:10
- Zuletzt bearbeitet 18.12.2025 20:53:34
In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory for zero-length skcipher requests. Just return 0.
CVE-2025-38168
- EPSS 0.05%
- Veröffentlicht 03.07.2025 08:36:07
- Zuletzt bearbeitet 20.11.2025 19:29:30
In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Unregister PMUs on probe failure When a resource allocation fails in one clock domain of an NI device, we need to properly roll back all previously registered perf PM...
CVE-2025-38163
- EPSS 0.11%
- Veröffentlicht 03.07.2025 08:36:04
- Zuletzt bearbeitet 18.12.2025 17:32:07
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi->total_valid_block_count syzbot reported a f2fs bug as below: ------------[ cut here ]------------ kernel BUG at fs/f2fs/f2fs.h:2521! RIP: 0010...
CVE-2025-38157
- EPSS 0.08%
- Veröffentlicht 03.07.2025 08:35:59
- Zuletzt bearbeitet 18.12.2025 21:09:32
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Abort software beacon handling if disabled A malicious USB device can send a WMI_SWBA_EVENTID event from an ath9k_htc-managed device before beaconing has been enab...