CVE-2025-39676
- EPSS 0.02%
- Veröffentlicht 05.09.2025 17:20:42
- Zuletzt bearbeitet 12.05.2026 13:17:04
In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxx_get_ep_fwdb() function is supposed to return NULL on error, but qla4xxx_ep_connect() returns error pointers...
CVE-2025-38734
- EPSS 0.02%
- Veröffentlicht 05.09.2025 17:20:34
- Zuletzt bearbeitet 25.11.2025 21:59:17
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on smcsk after smc_listen_out() BPF CI testing report a UAF issue: [ 16.446633] BUG: kernel NULL pointer dereference, address: 000000000000003 0 [ 16.447...
CVE-2025-38728
- EPSS 0.02%
- Veröffentlicht 04.09.2025 15:33:26
- Zuletzt bearbeitet 12.05.2026 13:17:03
In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parse_server_interfa...
CVE-2025-38729
- EPSS 0.02%
- Veröffentlicht 04.09.2025 15:33:26
- Zuletzt bearbeitet 12.05.2026 13:17:03
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by...
CVE-2025-38724
- EPSS 0.02%
- Veröffentlicht 04.09.2025 15:33:22
- Zuletzt bearbeitet 12.05.2026 13:17:02
In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_loc...
CVE-2025-38721
- EPSS 0.01%
- Veröffentlicht 04.09.2025 15:33:14
- Zuletzt bearbeitet 12.05.2026 13:17:02
In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlink_dump_table(): if (res < 0) { nf_conntrack_get(&ct->ct_gener...
CVE-2025-38718
- EPSS 0.03%
- Veröffentlicht 04.09.2025 15:33:12
- Zuletzt bearbeitet 17.03.2026 16:21:17
In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctp_rcv A cloned head skb still shares these frag skbs in fraglist with the original head skb. It's not safe to access these frag skbs. syzb...
CVE-2025-38717
- EPSS 0.01%
- Veröffentlicht 04.09.2025 15:33:11
- Zuletzt bearbeitet 25.11.2025 22:07:31
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcm_unattach() syzbot found a race condition when kcm_unattach(psock) and kcm_release(kcm) are executed at the same time. kcm_unattach() is missing...
CVE-2025-38716
- EPSS 0.03%
- Veröffentlicht 04.09.2025 15:33:10
- Zuletzt bearbeitet 25.11.2025 22:07:21
In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfs_find_init() The hfs_find_init() method can trigger the crash if tree pointer is NULL: [ 45.746290][ T9787] Oops: general protection faul...
CVE-2025-38714
- EPSS 0.01%
- Veröffentlicht 04.09.2025 15:33:09
- Zuletzt bearbeitet 12.05.2026 13:17:01
In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() The hfsplus_bnode_read() method can trigger the issue: [ 174.852007][ T9784] =============================================...