23105 matches found
Grub2: missing unregister call for gettext command may lead to use-after-free
...
Grub2: use-after-free in net_set_vlan
...
Grub2: use-after-free in grub_file_close()
...
HID: nintendo: avoid bluetooth suspend/resume stalls
...
drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()`
...
Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}
...
KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT
...
ARM: dts: qcom: replace gcc PXO with pxo_board fixed clock
...
KubeVirt Vulnerable to Arbitrary Host File Read and Write
...
Microsoft Defender Portal Spoofing Vulnerability
...
Azure Bastion Elevation of Privilege Vulnerability
...
Azure Monitor Elevation of Privilege Vulnerability
...
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...
Azure Application Gateway Elevation of Privilege Vulnerability
Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network...
Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability
Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network...
Microsoft SharePoint Online Elevation of Privilege Vulnerability
...
Azure Application Gateway Elevation of Privilege Vulnerability
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...
ax25: fix incorrect dev_tracker usage
...
tty: n_gsm: fix deadlock and link starvation in outgoing data path
...
Rsync: Out of bounds array access via negative index
...
mptcp: do not queue data on closed subflows
...
mruby array.c sort_cmp use after free
...
bpf: fix potential 32-bit overflow when accessing ARRAY map element
...
Bluetooth: When HCI work queue is drained, only queue chained work
...
net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null
...
mptcp: move subflow cleanup in mptcp_destroy_common()
...
Chromium: CVE-2025-13224 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-13223 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2025-13223 exists in the wild...
net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY
...
Potential denial of service in golang.org/x/crypto/ssh/agent
...
dmaengine: idxd: Refactor remove call with idxd_cleanup() helper
...
net: mctp: Don't access ifa_index when missing
...
ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot
...
ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot
...
f2fs: fix null-ptr-deref in f2fs_get_dnode_of_data
...
net: lantiq_xrx200: restore buffer if memory allocation failed
...
USB: gadget: Fix use-after-free Read in usb_udc_uevent()
...
bpf: Fix a data-race around bpf_jit_limit.
...
bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
...
powerpc/rtas: Fix RTAS MSR[HV] handling for Cell
...
dma-buf/dma-resv: check if the new fence is really later
...
Libvirt: denial of service in xml parsing
...
net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY
...
PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption
...
PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege
...
PostgreSQL libpq undersizes allocations, via integer wraparound
...
ipmi: Rework user message limit handling
...
sctp: Fix MAC comparison to be constant-time
...