CVE-2025-39693
- EPSS 0.16%
- Veröffentlicht 05.09.2025 17:20:59
- Zuletzt bearbeitet 12.05.2026 13:17:05
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference [WHY] Although unlikely drm_atomic_get_new_connector_state() or drm_atomic_get_old_connector_state() can return NULL. [HOW] Check...
CVE-2025-39691
- EPSS 0.17%
- Veröffentlicht 05.09.2025 17:20:57
- Zuletzt bearbeitet 30.07.2026 06:23:40
In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bh_read() helper There's issue as follows: BUG: KASAN: stack-out-of-bounds in end_buffer_read_sync+0xe3/0x110 Read of size 8 at addr ffffc90...
CVE-2025-39686
- EPSS 0.18%
- Veröffentlicht 05.09.2025 17:20:53
- Zuletzt bearbeitet 12.05.2026 13:17:05
In the Linux kernel, the following vulnerability has been resolved: comedi: Make insn_rw_emulate_bits() do insn->n samples The `insn_rw_emulate_bits()` function is used as a default handler for `INSN_READ` instructions for subdevices that have a ha...
CVE-2025-39685
- EPSS 0.16%
- Veröffentlicht 05.09.2025 17:20:51
- Zuletzt bearbeitet 12.05.2026 13:17:04
In the Linux kernel, the following vulnerability has been resolved: comedi: pcl726: Prevent invalid irq number The reproducer passed in an irq number(0x80008000) that was too large, which triggered the oob. Added an interrupt number check to preve...
CVE-2025-39684
- EPSS 0.17%
- Veröffentlicht 05.09.2025 17:20:50
- Zuletzt bearbeitet 12.05.2026 13:17:04
In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() syzbot reports a KMSAN kernel-infoleak in `do_insn_ioctl()`. A kernel buffer is allocated to hol...
CVE-2025-39677
- EPSS 0.14%
- Veröffentlicht 05.09.2025 17:20:43
- Zuletzt bearbeitet 30.07.2026 06:23:39
In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdisc_dequeue_internal This issue applies for the following qdiscs: hhf, fq, fq_codel, and fq_pie, and occurs in their change handlers when adj...
CVE-2025-39676
- EPSS 0.17%
- Veröffentlicht 05.09.2025 17:20:42
- Zuletzt bearbeitet 12.05.2026 13:17:04
In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxx_get_ep_fwdb() function is supposed to return NULL on error, but qla4xxx_ep_connect() returns error pointers...
CVE-2025-38734
- EPSS 0.45%
- Veröffentlicht 05.09.2025 17:20:34
- Zuletzt bearbeitet 30.07.2026 06:23:38
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on smcsk after smc_listen_out() BPF CI testing report a UAF issue: [ 16.446633] BUG: kernel NULL pointer dereference, address: 000000000000003 0 [ 16.447...
CVE-2025-38728
- EPSS 0.31%
- Veröffentlicht 04.09.2025 15:33:26
- Zuletzt bearbeitet 30.07.2026 06:23:37
In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parse_server_interfa...
CVE-2025-38724
- EPSS 0.38%
- Veröffentlicht 04.09.2025 15:33:22
- Zuletzt bearbeitet 30.07.2026 06:23:37
In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_loc...