The vulnerability of the Win32 Kernel Subsystem in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32 Kernel Subsystem in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Routing and Remote Access Service (RRAS) component in operating systems allows attackers to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS component in operating systems is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the Brokering File System (BFS) in Microsoft Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Brokering File System BFS in Microsoft Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows SSDP service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows SSDP service on Microsoft Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the pki_key_to_blob() function in the libssh library allows a hacker to disclose sensitive information or cause service failures.

The vulnerability of the pkikeytoblob function in the libssh library is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

Vulnerability of the aq_ptp_ring_alloc() function in the drivers/net/ethernet/aquantia/atlantic/aq_ptp.c module – A driver for supporting Ethernet adapter cards with a Quantia Atlantic chipset in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the aqptpringalloc function in the drivers/net/ethernet/aquantia/atlantic/aqptp.c module – The Ethernet adapter driver with the aQuantia Atlantic chipset in the Linux operating system is vulnerable to a vulnerability where previously released memory is reclaimed. Exploiting this...

Vulnerability of the rxe_qp_init_req() function in the drivers/infiniband/sw/rxe/rxe_qp.c module – The Linux kernel’s InfiniBand driver, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the rxeqpinitreq function in the drivers/infiniband/sw/rxe/rxeqp.c module – The Linux kernel’s InfiniBand driver relies on the reclamation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2025-37834

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: don't try to reclaim hwpoison folio Syzkaller reports a bug as follows: Injecting memory failure for pfn 0x18b00e at process virtual address 0x20ffd000 Memory failure: 0x18b00e: dirty swapcache page still referenced by...

CVE-2025-37834

CVE-2025-37834 affects the Linux kernel, specifically the mm/vmscan path. When a dirty swapcache page labeled hwpoison is isolated during reclaim and not locked, a memory failure can lead to the page being returned to the LRU and later cause a VM_BUG_ON_FOLIO during a subsequent reclaim. The issu...

DEBIAN-CVE-2025-21983

In the Linux kernel, the following vulnerability has been resolved: mm/slab/kvfreercu: Switch to WQMEMRECLAIM wq Currently kvfreercu APIs use a system workqueue which is "systemunboundwq" to driver RCU machinery to reclaim a memory. Recently, it has been noted that the following kernel warning ca...

CVE-2025-21983

CVE-2025-21983 describes a Linux kernel vulnerability where kvfree_rcu used the system_unbound_wq workqueue, potentially triggering a warning in nvme/scsi workflows due to flush_dependency checks. The mitigation documented in the sources is to switch kvfree_rcu to an independent WQ_MEM_RECLAIM wo...

CVE-2025-21983 mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq

In the Linux kernel, the following vulnerability has been resolved: mm/slab/kvfreercu: Switch to WQMEMRECLAIM wq Currently kvfreercu APIs use a system workqueue which is "systemunboundwq" to driver RCU machinery to reclaim a memory. Recently, it has been noted that the following kernel warning ca...

CVE-2025-21983 mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq

In the Linux kernel, the following vulnerability has been resolved: mm/slab/kvfreercu: Switch to WQMEMRECLAIM wq Currently kvfreercu APIs use a system workqueue which is "systemunboundwq" to driver RCU machinery to reclaim a memory. Recently, it has been noted that the following kernel warning ca...

Vulnerability of the devm_spi_alloc_master() function in the drivers/spi/spi.c module – The Linux kernel’s SPI device driver support allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the devmspiallocmaster function in the drivers/spi/spi.c module – The Linux kernel’s SPI device driver relies on the reclamation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the `new_stream_audio` function in the `fftools/ffmpeg_mux_init.c` file of the FFmpeg multimedia library allows a hacker to execute arbitrary code.

The vulnerability of the newstreamaudio function in the fftools/ffmpegmuxinit.c file of the FFmpeg multimedia library is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Telephony Server component for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Telephony Server component for Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the Direct Show Remote component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Direct Show Remote component for Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of Linux kernel’s LED components, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel LED component is related to a memory reclamation error in the ledtriggerset function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Resilient File System (ReFS) Deduplication Service in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Resilient File System ReFS Deduplication Service in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Resilient File System (ReFS) Deduplication Service in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Resilient File System ReFS Deduplication Service in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...