CVE-2025-37949
- EPSS 0.11%
- Veröffentlicht 20.05.2025 16:15:32
- Zuletzt bearbeitet 17.12.2025 20:05:13
In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the xenbus_thread callstack: BUG: kernel NULL pointer dereference, address: 0000000000000000 RI...
CVE-2025-37944
- EPSS 0.04%
- Veröffentlicht 20.05.2025 15:58:20
- Zuletzt bearbeitet 17.11.2025 12:57:39
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process Currently, ath12k_dp_mon_srng_process uses ath12k_hal_srng_src_get_next_entry to fetch the next entry from the d...
CVE-2025-37943
- EPSS 0.08%
- Veröffentlicht 20.05.2025 15:58:19
- Zuletzt bearbeitet 17.11.2025 12:57:46
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi In certain cases, hardware might provide packets with a length greater than the maximum native Wi-Fi header le...
CVE-2025-37940
- EPSS 0.05%
- Veröffentlicht 20.05.2025 15:58:17
- Zuletzt bearbeitet 19.12.2025 17:44:15
In the Linux kernel, the following vulnerability has been resolved: ftrace: Add cond_resched() to ftrace_graph_set_hash() When the kernel contains a large number of functions that can be traced, the loop in ftrace_graph_set_hash() may take a lot of...
CVE-2025-37937
- EPSS 0.07%
- Veröffentlicht 20.05.2025 15:34:39
- Zuletzt bearbeitet 19.12.2025 17:41:26
In the Linux kernel, the following vulnerability has been resolved: objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() If dib8000_set_dds()'s call to dib8000_read32() returns zero, the result is a divide-by-zero. Prevent that fro...
CVE-2025-37932
- EPSS 0.09%
- Veröffentlicht 20.05.2025 15:21:57
- Zuletzt bearbeitet 19.12.2025 17:34:41
In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_qlen_notify() idempotent htb_qlen_notify() always deactivates the HTB class and in fact could trigger a warning if it is already deactivated. Therefore, it is not...
CVE-2025-37928
- EPSS 0.45%
- Veröffentlicht 20.05.2025 15:21:54
- Zuletzt bearbeitet 10.11.2025 20:32:41
In the Linux kernel, the following vulnerability has been resolved: dm-bufio: don't schedule in atomic context A BUG was reported as below when CONFIG_DEBUG_ATOMIC_SLEEP and try_verify_in_tasklet are enabled. [ 129.444685][ T934] BUG: sleeping fu...
CVE-2025-37926
- EPSS 0.03%
- Veröffentlicht 20.05.2025 15:21:53
- Zuletzt bearbeitet 17.03.2026 15:46:45
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_session_rpc_open A UAF issue can occur due to a race condition between ksmbd_session_rpc_open() and __session_rpc_close(). Add rpc_lock to the se...
CVE-2025-37927
- EPSS 0.09%
- Veröffentlicht 20.05.2025 15:21:53
- Zuletzt bearbeitet 10.11.2025 20:33:13
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid There is a string parsing logic error which can lead to an overflow of hid or uid buffers. Comparing ACPIID_LEN again...
CVE-2025-37924
- EPSS 0.27%
- Veröffentlicht 20.05.2025 15:21:52
- Zuletzt bearbeitet 02.04.2026 09:16:18
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authentication Setting sess->user = NULL was introduced to fix the dangling pointer created by ksmbd_free_user. However, it is possible anothe...