CVE-2025-37907
- EPSS 0.04%
- Veröffentlicht 20.05.2025 15:21:40
- Zuletzt bearbeitet 17.11.2025 15:02:38
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix locking order in ivpu_job_submit Fix deadlock in job submission and abort handling. When a thread aborts currently executing jobs due to a fault, it first locks the...
CVE-2025-37906
- EPSS 0.05%
- Veröffentlicht 20.05.2025 15:21:39
- Zuletzt bearbeitet 17.11.2025 18:10:54
In the Linux kernel, the following vulnerability has been resolved: ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd ublk_cancel_cmd() calls io_uring_cmd_done() to complete uring_cmd, but we may have scheduled task work via ...
CVE-2025-37905
- EPSS 0.09%
- Veröffentlicht 20.05.2025 15:21:38
- Zuletzt bearbeitet 17.11.2025 18:10:30
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Balance device refcount when destroying devices Using device_find_child() to lookup the proper SCMI device to destroy causes an unbalance in device refcount, si...
CVE-2025-37903
- EPSS 0.07%
- Veröffentlicht 20.05.2025 15:21:37
- Zuletzt bearbeitet 17.11.2025 18:08:45
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_connector objects without incrementing the kref reference counts. Wh...
CVE-2025-37901
- EPSS 0.09%
- Veröffentlicht 20.05.2025 15:21:36
- Zuletzt bearbeitet 17.11.2025 18:08:31
In the Linux kernel, the following vulnerability has been resolved: irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs On Qualcomm chipsets not all GPIOs are wakeup capable. Those GPIOs do not have a corresponding MPM pin and shou...
CVE-2025-37900
- EPSS 0.05%
- Veröffentlicht 20.05.2025 15:21:35
- Zuletzt bearbeitet 19.11.2025 14:43:49
In the Linux kernel, the following vulnerability has been resolved: iommu: Fix two issues in iommu_copy_struct_from_user() In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to derefe...
CVE-2025-37899
- EPSS 0.06%
- Veröffentlicht 20.05.2025 15:21:34
- Zuletzt bearbeitet 06.12.2025 22:15:50
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to b...
CVE-2025-37897
- EPSS 0.08%
- Veröffentlicht 20.05.2025 15:21:33
- Zuletzt bearbeitet 19.11.2025 14:37:37
In the Linux kernel, the following vulnerability has been resolved: wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release plfxlc_mac_release() asserts that mac->lock is held. This assertion is incorrect, because even if it was possible, it wo...
CVE-2025-37892
- EPSS 0.05%
- Veröffentlicht 20.05.2025 11:15:48
- Zuletzt bearbeitet 12.11.2025 20:35:43
In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftl_read_oob() In INFTL_findwriteunit(), the return value of inftl_read_oob() need to be checked. A proper implementation can be found in INFT...
CVE-2025-37891
- EPSS 0.07%
- Veröffentlicht 19.05.2025 07:19:04
- Zuletzt bearbeitet 17.11.2025 19:21:12
In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function from MIDI 1.0 to UMP packet contains an internal buffer to keep the incoming MIDI bytes, and ...