CVE-2025-37998
- EPSS 0.1%
- Veröffentlicht 29.05.2025 13:15:56
- Zuletzt bearbeitet 16.12.2025 20:21:07
In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output_userspace() This patch replaces the manual Netlink attribute iteration in output_userspace() with nla_for_each_nested(), which e...
CVE-2025-37995
- EPSS 0.12%
- Veröffentlicht 29.05.2025 13:15:54
- Zuletzt bearbeitet 16.12.2025 20:20:35
In the Linux kernel, the following vulnerability has been resolved: module: ensure that kobject_put() is safe for module type kobjects In 'lookup_or_create_module_kobject()', an internal kobject is created using 'module_ktype'. So call to 'kobject_...
CVE-2025-37992
- EPSS 0.12%
- Veröffentlicht 26.05.2025 14:54:15
- Zuletzt bearbeitet 16.12.2025 20:19:49
In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change() Previously, when reducing a qdisc's limit via the ->change() operation, only the main skb queue was trimmed, potentially leaving...
CVE-2025-27558
- EPSS 0.19%
- Veröffentlicht 21.05.2025 00:00:00
- Zuletzt bearbeitet 15.04.2026 00:35:42
IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks. In mesh networks using Wi-Fi Protected Access (WPA, WPA2, or WPA3) or Wired Equivalent Privacy (WEP), an adversary can exploit this vulnerability to inject arbitrary frame...
CVE-2025-37990
- EPSS 0.11%
- Veröffentlicht 20.05.2025 17:18:45
- Zuletzt bearbeitet 16.12.2025 20:19:38
In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return v...
CVE-2025-37991
- EPSS 0.06%
- Veröffentlicht 20.05.2025 17:18:45
- Zuletzt bearbeitet 16.12.2025 20:19:43
In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal handler. Dave analyzed it, and it happe...
CVE-2025-37989
- EPSS 0.07%
- Veröffentlicht 20.05.2025 17:09:21
- Zuletzt bearbeitet 16.12.2025 20:19:33
In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart test on a router led to an out-of-memory condition, which was traced to a memory leak in the PHY LED trigger code. The root cause...
CVE-2025-37984
- EPSS 0.08%
- Veröffentlicht 20.05.2025 17:09:18
- Zuletzt bearbeitet 14.11.2025 17:00:02
In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() Herbert notes that DIV_ROUND_UP() may overflow unnecessarily if an ecdsa implementation's ->key_size() callback r...
CVE-2025-37983
- EPSS 0.05%
- Veröffentlicht 20.05.2025 17:09:17
- Zuletzt bearbeitet 16.12.2025 20:31:28
In the Linux kernel, the following vulnerability has been resolved: qibfs: fix _another_ leak failure to allocate inode => leaked dentry... this one had been there since the initial merge; to be fair, if we are that far OOM, the odds of failing at...
CVE-2025-37982
- EPSS 0.07%
- Veröffentlicht 20.05.2025 16:58:23
- Zuletzt bearbeitet 16.12.2025 20:31:22
In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work The skb dequeued from tx_queue is lost when wl1251_ps_elp_wakeup fails with a -ETIMEDOUT error. Fix that by queueing the skb back to...