CVE-2025-21670
- EPSS 0.22%
- Veröffentlicht 31.01.2025 12:15:28
- Zuletzt bearbeitet 01.10.2025 20:18:18
In the Linux kernel, the following vulnerability has been resolved: vsock/bpf: return early if transport is not assigned Some of the core functions can only be called if the transport has been assigned. As Michal reported, a socket might have the ...
CVE-2025-21672
- EPSS 0.14%
- Veröffentlicht 31.01.2025 12:15:28
- Zuletzt bearbeitet 01.10.2025 20:18:18
In the Linux kernel, the following vulnerability has been resolved: afs: Fix merge preference rule failure condition syzbot reported a lock held when returning to userspace[1]. This is because if argc is less than 0 and the function returns direct...
CVE-2025-21673
- EPSS 0.41%
- Veröffentlicht 31.01.2025 12:15:28
- Zuletzt bearbeitet 30.07.2026 06:18:22
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::hostname When shutting down the server in cifs_put_tcp_session(), cifsd thread might be reconnecting to multiple DFS targets before...
CVE-2025-21674
- EPSS 0.17%
- Veröffentlicht 31.01.2025 12:15:28
- Zuletzt bearbeitet 01.10.2025 20:18:18
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel Attempt to enable IPsec packet offload in tunnel mode in debug kernel generates the following kernel panic, ...
CVE-2025-21675
- EPSS 0.21%
- Veröffentlicht 31.01.2025 12:15:28
- Zuletzt bearbeitet 03.11.2025 21:19:06
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clear port select structure when fail to create Clear the port select structure on error so no stale values left after definers are destroyed. That's because the mlx5_lag...
CVE-2025-21676
- EPSS 0.43%
- Veröffentlicht 31.01.2025 12:15:28
- Zuletzt bearbeitet 30.07.2026 06:18:28
In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WAR...
CVE-2025-21678
- EPSS 0.23%
- Veröffentlicht 31.01.2025 12:15:28
- Zuletzt bearbeitet 30.07.2026 06:18:40
In the Linux kernel, the following vulnerability has been resolved: gtp: Destroy device along with udp socket's netns dismantle. gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created. Eve...
CVE-2024-57948
- EPSS 0.23%
- Veröffentlicht 31.01.2025 12:15:27
- Zuletzt bearbeitet 12.05.2026 13:16:24
In the Linux kernel, the following vulnerability has been resolved: mac802154: check local interfaces before deleting sdata list syzkaller reported a corrupted list in ieee802154_if_remove. [1] Remove an IEEE 802.15.4 network interface after unreg...
CVE-2025-21665
- EPSS 0.21%
- Veröffentlicht 31.01.2025 12:15:27
- Zuletzt bearbeitet 03.11.2025 21:19:03
In the Linux kernel, the following vulnerability has been resolved: filemap: avoid truncating 64-bit offset to 32 bits On 32-bit kernels, folio_seek_hole_data() was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite ...
CVE-2025-21666
- EPSS 0.22%
- Veröffentlicht 31.01.2025 12:15:27
- Zuletzt bearbeitet 12.05.2026 13:16:31
In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Recent reports have shown how we sometimes call vsock_*_has_data() when a vsock socket has been de-assigned from a tran...