CVE-2025-38612
- EPSS 0.02%
- Veröffentlicht 19.08.2025 17:15:39
- Zuletzt bearbeitet 07.01.2026 18:21:29
In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() In the error paths after fb_info structure is successfully allocated, the memory allocated in fb_deferred_io_...
CVE-2025-38602
- EPSS 0.02%
- Veröffentlicht 19.08.2025 17:15:38
- Zuletzt bearbeitet 07.01.2026 18:38:47
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Add missing check for alloc_ordered_workqueue Add check for the return value of alloc_ordered_workqueue since it may return NULL pointer.
CVE-2025-38604
- EPSS 0.02%
- Veröffentlicht 19.08.2025 17:15:38
- Zuletzt bearbeitet 07.01.2026 18:36:24
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Kill URBs before clearing tx status queue In rtl8187_stop() move the call of usb_kill_anchored_urbs() before clearing b_tx_status.queue. This change prevents callbac...
CVE-2025-38591
- EPSS 0.01%
- Veröffentlicht 19.08.2025 17:15:36
- Zuletzt bearbeitet 17.03.2026 16:09:47
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject narrower access to pointer ctx fields The following BPF program, simplified from a syzkaller repro, causes a kernel warning: r0 = *(u8 *)(r1 + 169); exit; Wit...
CVE-2025-38581
- EPSS 0.02%
- Veröffentlicht 19.08.2025 17:15:35
- Zuletzt bearbeitet 09.01.2026 13:55:19
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix crash when rebind ccp device for ccp.ko When CONFIG_CRYPTO_DEV_CCP_DEBUGFS is enabled, rebinding the ccp device causes the following crash: $ echo '0000:0a:00.2'...
CVE-2025-38584
- EPSS 0.03%
- Veröffentlicht 19.08.2025 17:15:35
- Zuletzt bearbeitet 17.05.2026 16:16:14
In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in padata_reorder that goes back to the initial commit. A reference count is taken at the start of the process in...
CVE-2025-38572
- EPSS 0.02%
- Veröffentlicht 19.08.2025 17:15:34
- Zuletzt bearbeitet 09.01.2026 13:53:12
In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6_gso_segment() syzbot was able to craft a packet with very long IPv6 extension headers leading to an overflow of skb->transport_header. This ...
CVE-2025-38574
- EPSS 0.02%
- Veröffentlicht 19.08.2025 17:15:34
- Zuletzt bearbeitet 09.01.2026 14:39:04
In the Linux kernel, the following vulnerability has been resolved: pptp: ensure minimal skb length in pptp_xmit() Commit aabc6596ffb3 ("net: ppp: Add bound checking for skb data on ppp_sync_txmung") fixed ppp_sync_txmunge() We need a similar fix ...
CVE-2025-38576
- EPSS 0.03%
- Veröffentlicht 19.08.2025 17:15:34
- Zuletzt bearbeitet 09.01.2026 14:15:23
In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the s...
CVE-2025-38577
- EPSS 0.02%
- Veröffentlicht 19.08.2025 17:15:34
- Zuletzt bearbeitet 09.01.2026 14:15:04
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic in f2fs_evict_inode As syzbot [1] reported as below: R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe17473450 R13: 00007f28b1c10854 R14: 00000000...