PT-2025-28578 · Microsoft · Windows Performance Recorder +1

Name of the Vulnerable Software and Affected Versions: Windows Performance Recorder affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Windows Performance Recorder. This allows an authorized attacker...

PT-2025-28551 · Microsoft · Windows Appx Deployment Server +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Service affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in the Windows AppX Deployment Service. This allows an authorize...

PT-2025-28504 · Microsoft · Service Fabric

Name of the Vulnerable Software and Affected Versions: Service Fabric affected versions not specified Description: The issue concerns improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally. This could...

PT-2025-28625

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue concerns improper link resolution before file access, also known as 'link following', which allows an unauthorized attacker to elevate privileges over a network...

Mescius ActiveReports.NET 代码问题漏洞

Mescius ActiveReports.NET is a .NET reporting tool from Mescius Japan. A code issue vulnerability exists in Mescius ActiveReports.NET that stems from the TypeResolutionService class not properly validating user-supplied data, which could lead to deserialization attacks and remote code execution...

CVE-2025-38235

CVE-2025-38235: Linux kernel fix for appletb_kbd backlight reference counting leak. backlight_device_get_by_name increments ref count for android backlight named "appletb_backlight" and it is not released, causing a reference leak. The fix decrements the reference count on removal via put_device ...

ggml-devel-5699-1.1 on GA media (moderate)

ggml-devel-5699-1.1 on GA media Announcement ID: openSUSE-SU-2025:15245-1 Rating: moderate Cross-References: CVE-2025-49847 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2025-38233

In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix clobbered r15 during livepatching While r15 is clobbered always with PPCFTRACEOUTOFLINE, it is not restored in livepatch sequence leading to not so obvious fails like below: BUG: Unable to handle kernel data...

CVE-2025-38229

In the Linux kernel, the following vulnerability has been resolved: media: cxusb: no longer judge rbuf when the write fails syzbot reported a uninit-value in cxusbi2cxfer. 1 Only when the write operation of usbbulkmsg in dvbusbgenericrw succeeds and rlen is greater than 0, the read operation of...

CVE-2025-38229

CVE-2025-38229 – Linux kernel (cxusb/dvb-usb I2C path) – concrete details : The issue arises in the I2C transfer path for cxusb-based DVB devices. When a usb_bulk_msg() write succeeds but rlen > 0, the subsequent read may still occur; however, if the write fails and rlen is 1, the read path is...

CVE-2025-38228

In the Linux kernel, the following vulnerability has been resolved: media: imagination: fix a potential memory leak in e5010probe Add videodevicerelease to release the memory allocated by videodevicealloc if something goes wrong...

CVE-2025-38225

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Cleanup after an allocation error When allocation failures are not cleaned up by the driver, further allocation errors will be false-positives, which will cause buffers to remain uninitialized and cause NULL...

CVE-2025-38223

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid kernel BUG for encrypted inode with unaligned file size The generic/397 test hits a BUGON for the case of encrypted inode with unaligned file size for example, 33K or 1K: 877.737811 run fstests generic/397 at 2025-01-...

CVE-2025-38221

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out of bounds punch offset Punching a hole with a start offset that exceeds maxend is not permitted and will result in a negative length in the truncateinodepartialfolio function while truncating the page cache,...

CVE-2025-38218

CVE-2025-38218 affects the Linux kernel with f2fs: a sanity check failure in sit_bitmap_size can lead to a kernel panic during resize/mount. The issue arises when sit_i->bitmap_size is 192, making sit bitmap size 1536, but with MAIN_SEGS at 261893 the sit_blk_cnt becomes 4762; build_sit_entrie...

CVE-2025-38217

In the Linux kernel, the following vulnerability has been resolved: hwmon: ftsteutates Fix TOCTOU race in ftsread In the ftsread function, when handling hwmonpwmautochannelstemp, the code accesses the shared variable data-fansourcechannel twice without holding any locks. It is first checked again...

CVE-2025-38216

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 "iommu/vt-d: Add support for static identity domain" changed the context entry setup during domain attachment from a set-and-check policy to a...

CVE-2025-38214 fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbsetvar to prevent null-ptr-deref in fbvideomodetovar If fbaddvideomode in fbsetvar fails to allocate memory for fbvideomode, later it may lead to a null-ptr dereference in fbvideomodetovar, as the fbinfo is registere...

CVE-2025-38213

Removed by vendor...

CVE-2025-38212

In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, 0 0: https://lore.kernel.org/all/[email protected]/ idrforeach is protected by rwsem, but thi...