CVE-2025-39827

CVE-2025-39827 affects the Linux kernel’s rose networking path. The issue arises from two separate reference counting paths for rose_neigh: a numeric count from rose_node structures and a use/refcount_t from rose_sock. The patch merges these into a single lifecycle by incrementing/decrementing ro...

CVE-2025-39846

CVE-2025-39846 : In the Linux kernel, a NULL pointer dereference could occur in PCMCIΑ code during resource allocation. Specifically, __iodyn_find_io_region() assigns pcmcia_make_resource() to res and uses it in pci_bus_alloc_resource(); if pcmcia_make_resource() fails, a dereference of res could...

CVE-2025-39916

CVE-2025-39916 affects the Linux kernel DAMON subsystem (mm/damon/reclaim). The issue is a divide-by-zero in the calculation of min_age_region when creating a new DAMON_RECLAIM scheme, where aggr_interval is used as the divisor. The documented fix directly returns -EINVAL in this case, preventing...

CVE-2025-62603

Fast DDS (DDS security) CVE-2025-62603 arises from the CDR parser deserializing the entire DataHolderSeq in ParticipantGenericMessage, allowing an out-of-memory condition and remote termination. Affected versions prior to the patch (3.4.1, 3.3.1, 2.6.11) are addressed by the vendor, and remediati...

CVE-2025-64098

CVE-2025-64098 affects Fast DDS (DDS security enabled) where an attacker tampering with PID_IDENTITY_TOKEN or PID_PERMISSIONS_TOKEN in the DATA Submessage of SPDP can trigger a 32-bit integer overflow in readOctetVector, causing std::vector::resize to allocate attacker-controlled sizes and leadin...

CVE-2025-39870

Mode C: The CVE-2025-39870 is a Linux kernel vulnerability in dmaengine: idxd, where a double free could occur in idxd_setup_wqs() due to error handling paths (conf_dev uninitialized when max_wqs

CVE-2025-39920

CVE-2025-39920 : In the Linux kernel, pcmcia: add error handling for add_interval() in do_validate_mem(). If kmalloc() fails in add_interval(), a null pointer could be inserted into a linked list, leading to illegal memory access when sub_interval() is called next. The patch adds error handling s...

CVE-2025-62799

CVE-2025-62799 affects Fast DDS (DDS implementation). A heap buffer overflow in the DATA_FRAG RTPS receive path allows an unauthenticated sender to send a malformed packet that exploits a 4‑byte alignment step during fragment metadata initialization, causing writes past the payload buffer. Conseq...

CVE-2025-62602

Fast DDS has a heap buffer overflow in the DATA Submessage when DDS Security is enabled, caused by tampering with PID_IDENTITY_TOKEN or PID_PERMISSIONS_TOKEN (readOctetVector) that can overflow length calculation and trigger large allocations leading to OOM and remote denial of service. Affected ...