CVE-2025-38151

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix hang when cmaneteventcallback fails to queuework The cited commit fixed a crash when cmaneteventcallback was called for a cmaid while work on that id from a previous call had not yet started. The work item was...

CVE-2025-38120

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapoavx2: fix initial map fill If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map. The early fix was incomplete and...

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

CVE-2025-38106

In the Linux kernel, the following vulnerability has been resolved: iouring: fix use-after-free of sq-thread in iouringshowfdinfo syzbot reports: BUG: KASAN: slab-use-after-free in getrusage+0x1109/0x1a60 Read of size 8 at addr ffff88810de2d2c8 by task a.out/304 CPU: 0 UID: 0 PID: 304 Comm: a.out...

CVE-2025-50258

creationtimestamp| type| source ---|---|--- 2025-07-03 15:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt32y6nbdf2r...

CVE-2025-40723

creationtimestamp| type| source ---|---|--- 2025-07-03 15:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt32gbpw262m...

CVE-2025-50262

creationtimestamp| type| source ---|---|--- 2025-07-03 15:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2yr7gnil2v...

CVE-2025-38113

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Fix NULL pointer dereference when nosmp is used With nosmp in cmdline, other CPUs are not brought up, leaving their cpcdescptr NULL. CPU0's iteration via foreachpossiblecpu dereferences these NULL pointers, causing...

CVE-2024-25176

creationtimestamp| type| source ---|---|--- 2025-07-03 11:28:59+00:00| seen| https://gist.github.com/pwnhacker0x18/cd75d01fc7c9b6c85c183fbe5353d276 2025-07-18 15:00:45+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luaplxklt224...

CVE-2025-38161

creationtimestamp| type| source ---|---|--- 2025-07-03 11:11:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2lrnfobi2i 2025-07-03 20:36:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114791217215546777 2025-12-03 14:14:49+00:00| seen|...

CVE-2025-38166

creationtimestamp| type| source ---|---|--- 2025-07-03 11:08:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2lniz7ev2r 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-38167

creationtimestamp| type| source ---|---|--- 2025-07-03 11:01:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2l7kdkaa2k...

CVE-2025-38146

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet may not end with the bottom label stack. When there are many stacks, The label count value has wrapped around. A dead loop occurs, soft lockup/CPU stuck...

CVE-2025-38111

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed ...

CVE-2025-38132

In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfgcsdevlock while removing cscfg from csdev There'll be possible race scenario for coresight config: CPU0 CPU1 perf enable load module cscfgloadconfigsets activate config. // sysfs sysactivecnt == 1...

CVE-2025-38102

In the Linux kernel, the following vulnerability has been resolved: VMCI: fix race between vmcihostsetupnotify and vmcictxunsetnotify During our test, it is found that a warning can be trigger in trygrabfolio as follow: ------------ cut here ------------ WARNING: CPU: 0 PID: 1678 at mm/gup.c:147...

CVE-2025-38157

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9khtc: Abort software beacon handling if disabled A malicious USB device can send a WMISWBAEVENTID event from an ath9khtc-managed device before beaconing has been enabled. This causes a device-by-zero error in the driver...

CVE-2025-38160

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypiclkregister devmkasprintf returns NULL when memory allocation fails. Currently, raspberrypiclkregister does not check for this case, which results in a NULL pointer dereference. Add NUL...

CVE-2025-38121

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: avoid panic on init failure In case of an error during init, inhwrestart will be set, but it will never get cleared. Instead, we will retry to init again, and then we will act like we are in a restart when we...

CVE-2025-38111

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed ...