24590 matches found
f2fs: fix to wait on block writeback for post_read case
...
wifi: mt76: mt7915: fix list corruption after hardware restart
...
vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
...
mm: slub: avoid wake up kswapd in set_track_prepare
...
HID: asus: fix UAF via HID_CLAIMED_INPUT validation
...
KVM: x86: use array_index_nospec with indices that come from guest
...
sctp: initialize more fields in sctp_v6_from_sk()
...
HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
...
net/mlx5: Fix lockdep assertion on sync reset unload event
...
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
...
net: rose: include node references in rose_neigh refcount
...
atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
...
smb: client: fix race with concurrent opens in rename(2)
...
ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
...
xfs: do not propagate ENODATA disk errors into xattr code
...
fs/smb: Fix inconsistent refcnt update
...
Arbitrary Code execution in Keras Safe Mode
...
Arbitary Code execution in Keras load_model()
...
net: rose: convert 'use' field to refcount_t
...
mISDN: hfcpci: Fix warning when deleting uninitialized timer
...
net: macb: fix unregister_netdev call order in macb_remove()
...
trace/fgraph: Fix the warning caused by missing unregister notifier
...
drm/gma500: Fix WARN_ON(lock->magic != lock) error
...
gpiolib: cdev: fix uninitialised kfifo
...
dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup
...
pstore: inode: Only d_invalidate() is needed
...
wifi: iwlwifi: mvm: ensure offloading TID queue exists
...
f2fs: compress: fix to guarantee persisting compressed blocks by CP
...
drm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()
...
smb3: fix temporary data corruption in collapse range
...
smb3: fix temporary data corruption in insert range
...
mm: /proc/pid/smaps_rollup: fix no vma's null-deref
...
parisc: Try to fix random segmentation faults in package builds
...
riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
...
btrfs: fix crash on racing fsync and size-extending write into prealloc
...
block: fix overflow in blk_ioctl_discard()
...
nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
...
drm/amd/display: Skip on writeback when it's not applicable
...
bnxt_en: Fix memory corruption when FW resources change during ifdown
...
tracing/trigger: Fix to return error if failed to alloc snapshot
...
Chromium: CVE-2025-10501 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-10502 Heap buffer overflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-10500 Use after free in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-10585 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2025-10585 exists in the wild...
Windows Bluetooth Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
Windows Graphics Component Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Windows Graphics Component Elevation of Privilege Vulnerability
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
on-headers vulnerable to http response header manipulation
...