24590 matches found
media: venus: Fix OOB read due to missing payload bound check
...
comedi: fix race between polling and detaching
...
fbdev: fix potential buffer overflow in do_register_framebuffer()
...
nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
...
scsi: bfa: Double-free fix
...
fs/ntfs3: Add sanity check for file name
...
hfs: fix general protection fault in hfs_find_init()
...
hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
...
io_uring/net: commit partial buffers on retry
...
drbd: add missing kref_get in handle_write_conflicts
...
jfs: Regular file corruption check
...
scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
...
mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
...
loop: Avoid updating block size under exclusive owner
...
media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
...
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
...
pNFS: Fix uninited ptr deref in block/scsi layout
...
MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
...
fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
...
LoongArch: BPF: Fix jump offset calculation in tailcall
...
sctp: linearize cloned gso packets in sctp_rcv
...
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
...
rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
...
net: kcm: Fix race condition in kcm_unattach()
...
exfat: add cluster chain loop check for dir
...
habanalabs: fix UAF in export_dmabuf()
...
drm/xe: Make dma-fences compliant with the safe access rules
...
drm/amd/pm: fix null pointer access
...
net/sched: ets: use old 'nbands' while purging unused classes
...
jfs: upper bound check of tree index in dbAllocAG
...
hfs: fix slab-out-of-bounds in hfs_bnode_read()
...
gfs2: Validate i_depth for exhash directories
...
iommufd: Prevent ALIGN() overflow
...
Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()
...
Chromium: CVE-2025-9867 Inappropriate implementation in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-9866 Inappropriate implementation in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-9865 Inappropriate implementation in Toolbar
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-9864 Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Improper access control in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
Grub2: fs/bfs: integer overflow in the bfs parser.
...
Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data
...
Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data
...
Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat
...
Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data
...
Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)
...
Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write
...
Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution
...
Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser
...