CVE-2025-37841
- EPSS 0.05%
- Veröffentlicht 09.05.2025 06:41:50
- Zuletzt bearbeitet 17.11.2025 12:50:14
In the Linux kernel, the following vulnerability has been resolved: pm: cpupower: bench: Prevent NULL dereference on malloc failure If malloc returns NULL due to low memory, 'config' pointer can be NULL. Add a check to prevent NULL dereference.
CVE-2025-37839
- EPSS 0.05%
- Veröffentlicht 09.05.2025 06:41:49
- Zuletzt bearbeitet 14.11.2025 19:54:45
In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check Journal emptiness is not determined by sb->s_sequence == 0 but rather by sb->s_start == 0 (which is set a few lines above). Furthermore 0 is...
CVE-2025-37834
- EPSS 0.04%
- Veröffentlicht 08.05.2025 06:26:24
- Zuletzt bearbeitet 14.11.2025 19:48:51
In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: don't try to reclaim hwpoison folio Syzkaller reports a bug as follows: Injecting memory failure for pfn 0x18b00e at process virtual address 0x20ffd000 Memory failure: ...
CVE-2025-37824
- EPSS 0.07%
- Veröffentlicht 08.05.2025 06:26:17
- Zuletzt bearbeitet 10.11.2025 15:45:14
In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() syzbot reported: tipc: Node number set to 1055423674 Oops: general protection fault, probably for non-canonical addres...
CVE-2025-37823
- EPSS 0.05%
- Veröffentlicht 08.05.2025 06:26:16
- Zuletzt bearbeitet 10.11.2025 15:52:37
In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable rep...
CVE-2025-37819
- EPSS 0.08%
- Veröffentlicht 08.05.2025 06:26:13
- Zuletzt bearbeitet 12.11.2025 21:25:03
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m_get_fwnode() is registered with the pci subsystem as pci_msi_get_fwnode_cb(), which may ge...
CVE-2025-37817
- EPSS 0.07%
- Veröffentlicht 08.05.2025 06:26:12
- Zuletzt bearbeitet 12.11.2025 21:36:47
In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd() In chameleon_parse_gdd(), if mcb_device_register() fails, 'mdev' would be released in mcb_device_register() via put_device(). Th...
CVE-2025-37810
- EPSS 0.07%
- Veröffentlicht 08.05.2025 06:26:08
- Zuletzt bearbeitet 12.11.2025 21:40:46
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from register DWC3_GEVNTCOUNT. There is a check for the count being zero, but ...
CVE-2025-37807
- EPSS 0.04%
- Veröffentlicht 08.05.2025 06:26:06
- Zuletzt bearbeitet 10.11.2025 17:32:35
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kmemleak warning for percpu hashmap Vlad Poenaru reported the following kmemleak issue: unreferenced object 0x606fd7c44ac8 (size 32): backtrace (crc 0): pcpu_...
CVE-2025-37808
- EPSS 0.07%
- Veröffentlicht 08.05.2025 06:26:06
- Zuletzt bearbeitet 10.11.2025 17:31:43
In the Linux kernel, the following vulnerability has been resolved: crypto: null - Use spin lock instead of mutex As the null algorithm may be freed in softirq context through af_alg, use spin locks instead of mutexes to protect the default null al...