CVE-2025-21944
- EPSS 0.06%
- Veröffentlicht 01.04.2025 16:15:25
- Zuletzt bearbeitet 03.11.2025 20:17:31
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix bug on trap in smb2_lock If lock count is greater than 1, flags could be old value. It should be checked with flags of smb_lock, not flags. It will cause bug-on trap fro...
CVE-2025-21945
- EPSS 0.02%
- Veröffentlicht 01.04.2025 16:15:25
- Zuletzt bearbeitet 03.11.2025 20:17:31
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_lock If smb_lock->zero_len has value, ->llist of smb_lock is not delete and flock is old one. It will cause use-after-free on error handling routi...
CVE-2025-21946
- EPSS 0.11%
- Veröffentlicht 01.04.2025 16:15:25
- Zuletzt bearbeitet 11.01.2026 17:15:52
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parse_sec_desc() If osidoffset, gsidoffset and dacloffset could be greater than smb_ntsd struct size. If it is smaller, It could cause slab-out-of-bound...
CVE-2025-21947
- EPSS 0.13%
- Veröffentlicht 01.04.2025 16:15:25
- Zuletzt bearbeitet 02.04.2026 09:16:17
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix type confusion via race condition when using ipc_msg_send_request req->handle is allocated using ksmbd_acquire_id(&ipc_ida), based on ida_alloc. req->handle from ksmbd_i...
CVE-2025-21948
- EPSS 0.02%
- Veröffentlicht 01.04.2025 16:15:25
- Zuletzt bearbeitet 03.11.2025 20:17:31
In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in input_event(). BUG: KASAN: null-ptr-deref in instrument_atom...
CVE-2025-21925
- EPSS 0.07%
- Veröffentlicht 01.04.2025 16:15:23
- Zuletzt bearbeitet 03.11.2025 20:17:28
In the Linux kernel, the following vulnerability has been resolved: llc: do not use skb_get() before dev_queue_xmit() syzbot is able to crash hosts [1], using llc and devices not supporting IFF_TX_SKB_SHARING. In this case, e1000 driver calls eth_...
CVE-2025-21931
- EPSS 0.02%
- Veröffentlicht 01.04.2025 16:15:23
- Zuletzt bearbeitet 03.11.2025 20:17:29
In the Linux kernel, the following vulnerability has been resolved: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio Commit b15c87263a69 ("hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined) add page poison checks in ...
CVE-2025-21916
- EPSS 0.03%
- Veröffentlicht 01.04.2025 16:15:22
- Zuletzt bearbeitet 03.11.2025 20:17:27
In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix a flaw in existing endpoint checks Syzbot once again identified a flaw in usb endpoint checking, see [1]. This time the issue stems from a commit authored by ...
CVE-2025-21917
- EPSS 0.04%
- Veröffentlicht 01.04.2025 16:15:22
- Zuletzt bearbeitet 03.11.2025 20:17:27
In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Flush the notify_hotplug_work When performing continuous unbind/bind operations on the USB drivers available on the Renesas RZ/G2L SoC, a kernel crash with the ...
CVE-2025-21920
- EPSS 0.01%
- Veröffentlicht 01.04.2025 16:15:22
- Zuletzt bearbeitet 03.11.2025 20:17:28
In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't make much sense, this also causes a bu...