PT-2025-37215

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the ALSA subsystem related to USB audio handling. Specifically, UAC3 cluster segment descriptors require validation to ensure their sizes align with...

kernel: padata: fix UAF in padata_reorder

A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padatareorder function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure pd is decremented in one thread, freeing it, while another thread still...

USN-7685-5: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - Ext4 file system; - SMB network file syste...

USN-7685-5 linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Device tree and open firmware driver; - SCSI subsystem; - TTY drivers; - Ext4 file system; - SMB network file syste...

kernel: padata: fix UAF in padata_reorder

A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padatareorder function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure pd is decremented in one thread, freeing it, while another thread still...

CVE-2025-53788

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2025-53788

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

CVE-2025-53716

Null pointer dereference in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to deny service over a network...

CVE-2025-53132

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-50161

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-50161

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

DEBIAN-CVE-2025-26403

Out-of-bounds write in the memory subsystem for some IntelR XeonR 6 processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

ALPINE-CVE-2025-26403

Out-of-bounds write in the memory subsystem for some IntelR XeonR 6 processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

UBUNTU-CVE-2025-26403

Out-of-bounds write in the memory subsystem for some IntelR XeonR 6 processors when using IntelR SGX or IntelR TDX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-53788 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

...

CVE-2025-53788 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

...

CVE-2025-53788

CVE-2025-53788 affects Windows Subsystem for Linux (WSL2). A Time-of-check time-of-use (TOCTOU) race condition in the WSL kernel allows a locally authenticated attacker to elevate privileges. The CVE is tied to WSL2 prior to version 2.5.10, with a CVSSv3.1 base score of 7.0 (High) under LOCAL att...

CVE-2025-53716 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

...

CVE-2025-53716 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

...

CVE-2025-53716

CVE-2025-53716 is a Denial-of-Service vulnerability due to a null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS). The CVE description states an authorized attacker can trigger a network-based DoS without user interaction, with attack vector NETWORK and impact Av...