CVE-2025-38141 dm: fix dm_blk_report_zones

In the Linux kernel, the following vulnerability has been resolved: dm: fix dmblkreportzones If dmgetlivetable returned NULL, dmputlivetable was never called. Also, it is possible that md-zonerevalidatemap will change while calling this function. Only read it once, so that we are always using the...

CVE-2025-38141

In the Linux kernel, the following vulnerability has been resolved: dm: fix dmblkreportzones If dmgetlivetable returned NULL, dmputlivetable was never called. Also, it is possible that md-zonerevalidatemap will change while calling this function. Only read it once, so that we are always using the...

CVE-2025-38139 netfs: Fix oops in write-retry from mis-resetting the subreq iterator

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resetting the subreq iterator Fix the resetting of the subrequest iterator in netfsretrywritestream to use the iterator-reset function as the iterator may have been shortened by a previous...

CVE-2025-38129

CVE-2025-38129 details a Linux kernel use-after-free in page_pool_recycle_in_ring, linked to page_pool's per-CPU recycle mechanism. The root cause is that a page may be freed while the page pool’s ring is still being recycled, resulting in a potential use-after-free when the producer_lock is not ...

CVE-2025-38127 ice: fix Tx scheduler error handling in XDP callback

In the Linux kernel, the following vulnerability has been resolved: ice: fix Tx scheduler error handling in XDP callback When the XDP program is loaded, the XDP callback adds new Tx queues. This means that the callback must update the Tx scheduler with the new queue number. In the event of a Tx...

CVE-2025-38122 gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO

In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for gveallocpendingpacket in TX DQO gveallocpendingpacket can return NULL, but gvetxaddskbdqo did not check for this case before dereferencing the returned pointer. Add a missing NULL check to prevent ...

CVE-2025-38120

Technical details about CVE-2025-38120 are not publicly available in the provided documents; the description notes a nf_set_pipapo_avx2 fix for initial map fill and a test addition, but no vendor/product specifics are given.

CVE-2025-38120

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfsetpipapoavx2: fix initial map fill If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map. The early fix was incomplete and...

CVE-2025-38116

In CVE-2025-38116, the Linux kernel’s ath12k wireless driver suffers a use-after-free (UAF) in the notifier chain when ath12k_core_hw_group_assign() or ath12k_core_hw_group_create() fails; the notifier chain is not unregistered and its memory may be freed after rmmod, risking access to freed noti...

CVE-2025-38115

In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: fix a potential crash on gsoskb handling SFQ has an assumption of always being able to queue at least one packet. However, after the blamed commit, sch-q.len can be inflated by packets in sch-gsoskb, and an...

CVE-2025-38111 net/mdiobus: Fix potential out-of-bounds read/write access

In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed ...

CVE-2025-38101 ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...

CVE-2025-38101

CVE-2025-38101 is publicly addressed in the openSUSE/SUSE advisory for the Linux kernel. The issue concerns the ring-buffer subsystem, specifically the function ring_buffer_subbuf_order_set(), where the critical section was enlarged to ensure error handling runs with the per-buffer mutex held, pr...

CVE-2025-38098

The CVE-2025-38098 issue affects the Linux kernel DRM AMD display stack. It centers on treating a wb (writeback) connector as physical in create_validate_stream_for_sink, and incorrect handling when operating on a drm_wb_connector as an amdgpu_dm_connector. The description notes that dereferencin...

CVE-2025-38094 net: cadence: macb: Fix a possible deadlock in macb_halt_tx.

In the Linux kernel, the following vulnerability has been resolved: net: cadence: macb: Fix a possible deadlock in macbhalttx. There is a situation where after THALT is set high, TGO stays high as well. Because jiffies are never updated, as we are in a context with interrupts disabled, we never...

SUSE SLES15: xorg-x11-server / xorg-x11-server-Xvfb / xorg-x11-server-extra / etc (SUSE-SU-2025:02207-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02207-1 advisory. - CVE-2025-49176: Fixed the integer overflow in Big Requests Extension bsc1244084. Tenable has extracted the preceding description block...

SUSE SLES15: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (SUSE-SU-SUSE-RU-2025:02203-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2025:02203-1 advisory. - Fix idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243859 - Update to version 1.4.2 - Update...

PT-2025-27782

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns the HttpOnly flag being set to false on the PHPSESSION cookie, allowing it to be accessed by other sources such as JavaScript. Recommendations: At the moment, there is no...

PT-2025-30866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue was identified and resolved in the rtsn probe function within the networking subsystem of the Linux kernel. The fix involves adding a check for the retur...

WordPress PeepSo Core: Groups plugin <= 6.4.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Description vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via Group Description vulnerability discovered by Bikram Kharal in WordPress Plugin PeepSo Core: Groups versions = 6.4.6.0...