16803 matches found
CVE-2025-39695
CVE-2025-39695 affects the Linux kernel RDMA/rxe path. The issue arises when skb packets that depend on RXE resources (e.g., QP, sk) are destroyed while RXE resources are being released, causing call traces. The patch adds a timestamp when skb packets are created to avoid skb packets hanging in s...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly detecting user read permissions, which could lead to a system call bypass...
CVE-2025-39695: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flush delayed SKBs while releasing RXE resources When skb packets are sent out, these skb packets still depends on the rxe resources, for example, QP, sk, when these packets are destroyed. If these rxe resources are...
CVE-2025-22419
In multiple locations, there is a possible way to mislead the user into enabling malicious phone calls forwarding due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...
CVE-2025-38723
CVE-2025-38723 concerns the Linux kernel, specifically LoongArch BPF tailcall handling. The issue arises in the tailcall jump offset calculation when bpf_int_jit_compile() fails to initialize the JIT context, leaving out_offset = -1. Consequently, the computed jmp_offset = (out_offset - cur_offse...
Access Control Bypass
github.com/external-secrets/external-secrets is vulnerable to Access Control Bypass. The vulnerability is due to missing namespace selector in List calls for Secret and SecretStore resources, allowing attackers to exfiltrate secrets across the cluster...
rxrpc: Fix bug due to prealloc collision
...
rxrpc: Fix recv-recv race of completed call
...
bpf: Prevent tailcall infinite loop caused by freplace
...
Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall
...
firmware: qcom: scm: smc: Handle missing SCM device
...
Denial of Service through Data corruption in gRPC-C++
...
bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
...
net/mlx5e: Don't call cleanup on profile rollback failure
...
ksmbd: fix use-after-free in ksmbd_session_rpc_open
...
VulnCheck KEV: CVE-2025-42957
SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a miscalculation of the jump offset in the LoongArch architecture BPF tail call, which could lead to a soft...
SUNRPC: fix a memleak in gss_import_v2_context
...