CVE-2025-38422

CVE-2025-38422 affects the Linux kernel lan743x PCI1xxxx device support. The fix modifies EEPROM and OTP size handling: maximum OTP size is now 8 KB and EEPROM size 64 KB for hearthstone PCI1xxxx devices, updates max size definitions, and ensures the correct EEPROM length is returned depending on...

CVE-2025-38422 net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices Maximum OTP and EEPROM size for hearthstone PCI1xxxx devices are 8 Kb and 64 Kb respectively. Adjust max size definitions and return correct EEPROM length based on...

Security update for docker

This update for docker fixes the following issues: Update to Docker 28.2.2-ce bsc1243833, bsc1242114: CVE-2025-0495: Fixed credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration.bsc1239765 CVE-2025-22872:...

Malicious code in bk-card-cc-credit-limit-adjustment-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 839ee8572e063e7008de9939f5e66afdb87eb4083735168ee48b739ed54814d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-50090

In the Linux kernel, the following vulnerability has been resolved: btrfs: replace BTRFSMAXEXTENTSIZE with fsinfo-maxextentsize On zoned filesystem, data write out is limited by maxzoneappendsize, and a large ordered extent is split according the size of a bio. OTOH, the number of extents to be...

CVE-2025-38055 perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix segfault with PEBS-via-PT with samplefreq Currently, using PEBS-via-PT with a sample frequency instead of a sample period, causes a segfault. For example: BUG: kernel NULL pointer dereference, address:...

Enhancing Watermarking Quality for LLMs Via Contextual Generation States Awareness

Recent advancements in watermarking techniques have enabled the embedding of secret messages into AI-generated text AIGT, serving as an important mechanism for AIGT detection. Existing methods typically interfere with the generation processes of large language models LLMs to embed signals within...

CVE-2023-41304

Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window...

CVE-2019-14697

musl libc through 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code...

CVE-2025-37931

CVE-2025-37931 (btrfs) affects the Linux kernel’s btrfs metadata write path. The issue arises when writing subpage extent buffers (EBs) with a 64k page size, 16k nodsz, and a 4k sectorsize, where the bitmap addressing is based on sectors, yielding 4 bits per node. If a dirty range is found, the c...

CVE-2025-37931 btrfs: adjust subpage bit start based on sectorsize

In the Linux kernel, the following vulnerability has been resolved: btrfs: adjust subpage bit start based on sectorsize When running machines with 64k page size and a 16k nodesize we started seeing tree log corruption in production. This turned out to be because we were not writing out dirty bloc...

CVE-2025-37911

The CVE-2025-37911 vulnerability affects the bnxt_en driver in the Linux kernel. It arises when ethtool -w retrieves a FW core dump: the DMA’d segment list length reported by the FW can exceed the allocated info->dest_buf, causing an out-of-bounds copy and memory corruption. Root cause is an u...

kernel: virtio-net: fix overflow inside virtnet_rq_alloc

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix overflow inside virtnetrqalloc When the frag just got a page, then may lead to regression on VM. Specially if the sysctl net.core.highorderallocdisable value is 1, then the frag always get a page when do refill...

CVE-2025-37889

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platformmax as control value This reverts commit 9bdd10d57a88 "ASoC: ops: Shift tested values in sndsocputvolsw by +min", and makes some additional related updates. There are two ways the platformmax...

CVE-2023-53076

No description is available for this CVE...

CVE-2023-53129

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2023-53053 erspan: do not use skb_mac_header() in ndo_start_xmit()

In the Linux kernel, the following vulnerability has been resolved: erspan: do not use skbmacheader in ndostartxmit Drivers should not assume skbmacheaderskb == skb-data in their ndostartxmit. Use skbnetworkoffset and skbtransportoffset which better describe what is needed in erspanfbxmit and...

CVE-2022-49861 dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: mvxorv2: Fix a resource leak in mvxorv2remove A clkprepareenable call in the probe is not balanced by a corresponding clkdisableunprepare in the remove function. Add the missing call...

CVE-2025-37745

In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Avoid deadlock in hibernatecompressorparamset syzbot reported a deadlock in locksystemsleep see below. The write operation to "/sys/module/hibernate/parameters/compressor" conflicts with the registration of ieee802...

CVE-2024-58099

Summary (CVE-2024-58099, Linux kernel vmxnet3): The issue occurs in vmxnet3_xdp_xmit_frame where a DMA address is computed as page_pool_get_dma_addr(page) + VMXNET3_XDP_HEADROOM. If a native XDP BPF program moves xdp->data (e.g., via xdp->data_hard_start), the fixed offset yields an incorre...