CVE-2025-38438

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Use devmkstrdup to avoid memleak. sofpdata-tplgfilename can have address allocated by kstrdup and can be overwritten. Memory leak was detected with kmemleak: unreferenced object 0xffff88812391ff60 size 16:...

CVE-2025-7723

creationtimestamp| type| source ---|---|--- 2025-07-25 16:32:42+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3lushyr2lw22a...

CVE-2025-38456

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Fix potential memory corruption in ipmicreateuser The "intf" list iterator is an invalid pointer if the correct "intf-intfnum" is not found. Calling atomicdec&intf-nrusers on and invalid pointer will lead to memo...

CVE-2025-38445

In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix stack memory use after return in raid1reshape In the raid1reshape function, newpool is allocated on the stack and assigned to conf-r1biopool. This results in conf-r1biopool.wait.head pointing to a stack address...

CVE-2025-38460

CVE-2025-38460 relates to the Linux kernel, fixing a potential null pointer dereference in the ATM clip path (to_atmarpd()). The issue arises because to_atmarpd() can be called without RTNL protection, notably via clip_neigh_solicit() / neigh_ops->solicit(), and there is no RTNL dependency aro...

CVE-2025-38411

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during the pause loop, it will have the ref that belongs to the INPROGRESS flag removed at that point - however, if it then goes to the final wait loop, that will also...

CVE-2025-38415

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sbminblocksize Syzkaller reports an "UBSAN: shift-out-of-bounds in squashfsbioread" bug. Syzkaller forks multiple processes which after mounting the Squashfs filesystem, issues an ioctl"/dev/loop0...

CVE-2025-8155

creationtimestamp| type| source ---|---|--- 2025-07-25 13:30:13+00:00| seen| https://bsky.app/profile/potato.software/post/3lus5sl5ggc24 2025-07-25 15:08:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114914497629194333...

CVE-2025-38397

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in virtme-ng, I get the following "suspicious RCU usage" warning in nvmempathaddsysfslink: ''' 5.024557 T44 nvmet: Created nvm controller 1 for...

CVE-2025-38383

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix data race in shownumainfo The following data-race was found in shownumainfo: ================================================================== BUG: KCSAN: data-race in vmallocinfoshow / vmallocinfoshow read to...

CVE-2025-38371

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Disable interrupts before resetting the GPU Currently, an interrupt can be triggered during a GPU reset, which can lead to GPU hangs and NULL pointer dereference in an interrupt context as shown in the following trace:...

CVE-2025-38382 btrfs: fix iteration of extrefs during log replay

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix iteration of extrefs during log replay At inodeaddref when processing extrefs, if we jump into the next label we have an undefined value of victimname.len, since we haven't initialized it before we did the goto. This...

CVE-2025-38362

The CVE-2025-38362 issue is in the Linux kernel’s DRM AMD display path. The function get_first_active_display() could return NULL when the display list is empty, and mod_hdcp_hdcp1_enable_encryption() did not check this return value, risking a NULL pointer dereference in mod_hdcp_hdcp2_enable_enc...

CVE-2025-38360 drm/amd/display: Add more checks for DSC / HUBP ONO guarantees

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees WHY For non-zero DSC instances it's possible that the HUBP domain required to drive it for sequential ONO ASICs isn't met, potentially causing the logic to the tile t...

CVE-2025-02511

creationtimestamp| type| source ---|---|--- 2025-07-24 18:59:17+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luq7pytxmk25...

CVE-2025-5243 Arbitrary File Upload in SMG Software's Information Portal

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in SMG Software Information Portal allows Code Injection, Upload a Web Shell to a Web Server, Code Inclusion. This issue affects Information...

CVE-2025-8114

A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash. Mitigation...

CVE-2025-8029

creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:21+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2026-04-13 17:56:51+00:00| seen| Telegram/nRwHg21u3kwsjDOOt0f-arNsN2T3VkzqZMIwlfOSJtGS-M...

CVE-2025-8028

creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:20+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2025-07-25 03:32:53+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4gg2y622g 2025-07-29 13:27:06+00:00| seen|...

CVE-2025-8044

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs are present in Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of these...