21727 matches found
netfs: Fix missing xas_retry() calls in xarray iteration
...
netdevsim: Fix memory leak of nsim_dev->fa_cookie
...
containerd affected by a local privilege escalation via wide permissions on CRI directory
...
missing SFTP host verification with wolfSSH
...
containerd CRI server: Host memory exhaustion through Attach goroutine leak
...
smb: client: fix UAF in decryption with multichannel
...
netlink: Bounds-check struct nlmsgerr creation
...
bpf: Prevent bpf program recursion for raw tracepoint probes
...
iavf: fix hang on reboot with ice
...
net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
...
perf: Fix hang while freeing sigtrap event
...
Chromium: CVE-2025-12727 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12726 Inappropriate implementation in Views.
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12725 Out of bounds write in WebGPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
...
RISC-V: KVM: Teardown riscv specific bits after kvm_exit
...
wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path
...
Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode
...
Quadratic complexity in os.path.expandvars() with user-controlled template
...
FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LS Update packet.
...
md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb
...
can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
...
Xorg: xwayland: use-after-free in xkb client resource removal
...
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
...
FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) under specific malformed LSA conditions.
...
FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
...
x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
...
ksmbd: prevent connection release during oplock break notification
...
tracing: Fix bad hist from corrupting named_triggers list
...
net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
...
net: stmmac: move the EST lock to struct stmmac_priv
...
mm: memory-failure: update ttu flag inside unmap_poisoned_folio
...
net/mlx5: Fix peer devlink set for SF representor devlink port
...
Keras keras.utils.get_file Utility Path Traversal Vulnerability
...
comedi: fix divide-by-zero in comedi_buf_munge()
...
ksmbd: fix out-of-bounds in parse_sec_desc()
...
ksmbd: fix bug on trap in smb2_lock
...
uprobes: Reject the shared zeropage in uprobe_write_opcode()
...
efi: Don't map the entire mokvar table to determine its size
...
thermal: core: call put_device() only after device_register() fails
...
bnxt: Do not read past the end of test names
...
drm/amdkfd: Add sync after creating vram bo
...
Chromium: CVE-2025-12441 Out of bounds read in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12440 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12439 Inappropriate implementation in App-Bound Encryption
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12438 Use after free in Ozone
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12437 Use after free in PageInfo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12436 Policy bypass in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12435 Incorrect security UI in Omnibox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-12434 Race in Storage
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...