CVE-2025-37843

In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Avoid unnecessary device replacement check Hot-removal of nested PCI hotplug ports suffers from a long-standing race condition which can lead to a deadlock: A parent hotplug port acquires pcilockrescanremove, then...

CVE-2025-37842

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-qspi: use devm function instead of driver remove Driver use devm APIs to manage clk/irq/resources and register the spi controller, but the legacy remove function will be called first during device detach and trigger kern...

CVE-2025-37883

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Add check for getzeroedpage Add check for the return value of getzeroedpage in sclpconsoleinit to prevent null pointer dereference. Furthermore, to solve the memory leak caused by the loop allocation, add a free helper...

CVE-2025-37873

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted txprod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails...

CVE-2025-37852

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: handle amdgpucgscreatedevice errors in amdpowerplaycreate Add error handling to propagate amdgpucgscreatedevice failures to the caller. When amdgpucgscreatedevice fails, release hwmgr and return -ENOMEM to prevent nul...

CVE-2025-37847

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in ivpumscleanup Fix deadlock in ivpumscleanup by preventing runtime resume after filepriv-mslock is acquired. During a failure in runtime resume, a cold boot is executed, which calls ivpumscleanupall. Th...

CVE-2025-37885

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if new route isn't postable Restore an IRTE back to host control remapped or posted MSI mode if the new GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing typ...

CVE-2025-37871

In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sccount directly if fail to queue dlrecall A deadlock warning occurred when invoking nfs4putstid following a failed dlrecall queue operation: T1 T2 nfs4laundromat nfs4getclientreaplist nfs4anylockblockers breakleas...

CVE-2025-37862

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...

CVE-2025-37874

creationtimestamp| type| source ---|---|--- 2025-05-09 07:25:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15697 2025-05-09 19:07:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114479439792019818...

CVE-2025-3712

creationtimestamp| type| source ---|---|--- 2025-05-09 04:24:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15663 2025-05-09 07:01:38+00:00| published-proof-of-concept| Telegram/LmF-oJVU7SiGeaAkGTq-PJOHK6kdysB5ZubzAPJONfATA 2025-05-09 08:41:18+00:00| seen| https://t.me/cvedetector/24915...

Dell Storage Manager XML External Entity References Improperly Restricted Vulnerability

Dell Storage Manager is software for managing and monitoring Dell storage systems, providing centralized management, performance monitoring, and troubleshooting with support for a wide range of Dell storage products. An improperly restricted XML external entity reference vulnerability exists in...

CVE-2025-29813

creationtimestamp| type| source ---|---|--- 2025-05-08 22:25:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15631 2025-05-08 22:42:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114474625505155153 2025-05-08 23:15:39+00:00| seen|...

CVE-2025-47732

creationtimestamp| type| source ---|---|--- 2025-05-08 22:24:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15629 2025-05-08 22:40:16+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3looy6d4ntx2n 2025-05-08 22:42:44+00:00| seen|...

CVE-2025-4442

creationtimestamp| type| source ---|---|--- 2025-05-08 18:22:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114473600518783822 2025-05-09 00:25:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15648 2025-05-09 00:41:25+00:00| seen|...

CVE-2025-37821

In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Fix se-slice being set to U64MAX and resulting crash There is a code path in dequeueentities that can set the slice of a schedentity to U64MAX, which sometimes results in a crash. The offending case is when...

CVE-2025-37825

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix out-of-bounds access in nvmetenableport When trying to enable a port that has no transport configured yet, nvmetenableport uses NVMFTRTYPEMAX 255 to query the transports array, causing an out-of-bounds access: 106.0586...

CVE-2025-37824

In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL pointer dereference in tipcmonreinitself syzbot reported: tipc: Node number set to 1055423674 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 1 SMP KASAN NOPTI KASAN:...

CVE-2025-37811

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: cihdrcimx: fix usbmisc handling usbmisc is an optional device property so it is totally valid for the corresponding data-usbmiscdata to have a NULL value. Check that before dereferencing the pointer. Found by Linux...

CVE-2025-37832

In the Linux kernel, the following vulnerability has been resolved: cpufreq: sun50i: prevent out-of-bounds access A KASAN enabled kernel reports an out-of-bounds access when handling the nvmem cell in the sun50i cpufreq driver: ================================================================== BU...