CVE-2025-38608
- EPSS 0.39%
- Veröffentlicht 19.08.2025 17:15:39
- Zuletzt bearbeitet 30.07.2026 06:23:30
In the Linux kernel, the following vulnerability has been resolved: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls When sending plaintext data, we initially calculated the corresponding ciphertext length. However, if we later ...
CVE-2025-38609
- EPSS 0.16%
- Veröffentlicht 19.08.2025 17:15:39
- Zuletzt bearbeitet 07.01.2026 18:23:24
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Check governor before using governor->name Commit 96ffcdf239de ("PM / devfreq: Remove redundant governor_name from struct devfreq") removes governor_name and uses gov...
CVE-2025-38612
- EPSS 0.17%
- Veröffentlicht 19.08.2025 17:15:39
- Zuletzt bearbeitet 07.01.2026 18:21:29
In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() In the error paths after fb_info structure is successfully allocated, the memory allocated in fb_deferred_io_...
CVE-2025-38601
- EPSS 0.23%
- Veröffentlicht 19.08.2025 17:15:38
- Zuletzt bearbeitet 30.07.2026 06:23:30
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: clear initialized flag for deinit-ed srng lists In a number of cases we see kernel panics on resume due to ath11k kernel page fault, which happens under the following...
CVE-2025-38602
- EPSS 0.16%
- Veröffentlicht 19.08.2025 17:15:38
- Zuletzt bearbeitet 07.01.2026 18:38:47
In the Linux kernel, the following vulnerability has been resolved: iwlwifi: Add missing check for alloc_ordered_workqueue Add check for the return value of alloc_ordered_workqueue since it may return NULL pointer.
CVE-2025-38604
- EPSS 0.17%
- Veröffentlicht 19.08.2025 17:15:38
- Zuletzt bearbeitet 30.07.2026 06:23:30
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Kill URBs before clearing tx status queue In rtl8187_stop() move the call of usb_kill_anchored_urbs() before clearing b_tx_status.queue. This change prevents callbac...
CVE-2025-38595
- EPSS 0.18%
- Veröffentlicht 19.08.2025 17:15:37
- Zuletzt bearbeitet 30.07.2026 06:23:29
In the Linux kernel, the following vulnerability has been resolved: xen: fix UAF in dmabuf_exp_from_pages() [dma_buf_fd() fixes; no preferences regarding the tree it goes through - up to xen folks] As soon as we'd inserted a file reference into de...
CVE-2025-38590
- EPSS 0.36%
- Veröffentlicht 19.08.2025 17:15:36
- Zuletzt bearbeitet 30.07.2026 06:23:28
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Remove skb secpath if xfrm state is not found Hardware returns a unique identifier for a decrypted packet's xfrm state, this state is looked up in an xarray. However, th...
CVE-2025-38591
- EPSS 0.19%
- Veröffentlicht 19.08.2025 17:15:36
- Zuletzt bearbeitet 14.09.2026 12:17:36
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject narrower access to pointer ctx fields The following BPF program, simplified from a syzkaller repro, causes a kernel warning: r0 = *(u8 *)(r1 + 169); exit; Wit...
CVE-2025-38579
- EPSS 0.16%
- Veröffentlicht 19.08.2025 17:15:35
- Zuletzt bearbeitet 30.07.2026 06:23:28
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix KMSAN uninit-value in extent_info usage KMSAN reported a use of uninitialized value in `__is_extent_mergeable()` and `__is_back_mergeable()` via the read extent tree pat...