Source: msrc

ksmbd: Fix dangling pointer in krb_authenticate

2026-03-31 CVE-2025-37778

ksmbd: Fix race condition in RPC handle list access

2026-03-31 CVE-2025-40039

ksmbd: fix recursive locking in RPC handle list access

2026-03-31 CVE-2025-40090

ksmbd: fix the warning from __kernel_write_iter

2026-03-31 CVE-2025-37775

ksmbd: Fix UAF in __close_file_table_ids

2026-03-31 CVE-2025-37952

ksmbd: fix use-after-free in __smb2_lease_break_noti()

2026-03-31 CVE-2025-37777

ksmbd: fix use-after-free in kerberos authentication

2026-03-31 CVE-2025-37924

ksmbd: fix use-after-free in ksmbd_session_rpc_open

2026-03-31 CVE-2025-37926

ksmbd: fix use-after-free in session logoff

2026-03-31 CVE-2025-37899

ksmbd: fix use-after-free in smb_break_all_levII_oplock()

2026-03-31 CVE-2025-37776

ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"

2026-03-31 CVE-2025-37802

ksmbd: prevent out-of-bounds stream writes by validating *pos

2026-03-31 CVE-2025-37947

ksmbd: prevent rename with empty string

2026-03-31 CVE-2025-37956

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

2026-03-31 CVE-2025-39943

criticalMicrosoft MSRC 2026-W14

ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

2026-03-31 CVE-2025-39942

ksmbd: transport_ipc: validate payload size before reading handle

2026-03-31 CVE-2025-40084

KVM: arm64: Prevent access to vCPU events before init

2026-03-31 CVE-2025-40102

KVM: arm64: Tear down vGIC on failed vCPU creation

2026-03-31 CVE-2025-37849

KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception

2026-03-31 CVE-2025-37957

KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid

2026-03-31 CVE-2025-40038

KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace

2026-03-31 CVE-2022-49932

KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses

2026-03-31 CVE-2025-23141

KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

2026-03-31 CVE-2025-40026

KVM: x86: Reset IRTE to host control if new route isn't postable

2026-03-31 CVE-2025-37885

KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT

2026-03-31 CVE-2022-50224

Lack of limit when parsing cookies can cause memory exhaustion in net/http

2026-03-31 CVE-2025-58186

Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c

2026-03-31 CVE-2025-5914

Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c

2026-03-31 CVE-2025-5915

Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c

2026-03-31 CVE-2025-5916

Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c

2026-03-31 CVE-2025-5917

Libarchive: reading past eof may be triggered for piped file streams

2026-03-31 CVE-2025-5918

libnvdimm/labels: Fix divide error in nd_label_data_init()

2026-03-31 CVE-2025-38072

Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

2026-03-31 CVE-2025-12105

Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

2026-03-31 CVE-2025-4948

Libsoup: null pointer dereference in libsoup may lead to denial of service

2026-03-31 CVE-2025-4476

Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c

2026-03-31 CVE-2025-4969

Libssh: out-of-bounds read in sftp_handle()

2026-03-31 CVE-2025-5318

Libtpms contains a possible out-of-bound access and abort due to HMAC signing issue

2026-03-31 CVE-2025-49133

Libxml: heap use after free (uaf) leads to denial of service (dos)

2026-03-31 CVE-2025-49794

criticalMicrosoft MSRC 2026-W14

Libxml: null pointer dereference leads to denial of service (dos)

2026-03-31 CVE-2025-49795

Libxml: type confusion leads to denial of service (dos)

2026-03-31 CVE-2025-49796

criticalMicrosoft MSRC 2026-W14

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

2026-03-31 CVE-2025-6021

Libxml2: stack buffer overflow in xmllint interactive shell command handling

2026-03-31 CVE-2025-6170

Libxslt: type confusion in exsltfuncresultcompfunction of libxslt

2026-03-31 CVE-2025-11731

Linux-pam: linux-pam directory traversal

2026-03-31 CVE-2025-6020

LoongArch: Return NULL from huge_pte_offset() for invalid PMD

2026-03-31 CVE-2025-37818

Lua library commands may lead to integer overflow and potential RCE

2026-03-31 CVE-2025-46817

LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames.

2026-03-31 CVE-2025-62813

M365 Copilot Information Disclosure Vulnerability

2026-03-31 CVE-2025-32711

criticalMicrosoft MSRC 2026-W14

M365 Copilot Information Disclosure Vulnerability

2026-03-31 CVE-2025-59252

criticalMicrosoft MSRC 2026-W14

mcb: fix a double free bug in chameleon_parse_gdd()

2026-03-31 CVE-2025-37817

media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove

2026-03-31 CVE-2025-39996

criticalMicrosoft MSRC 2026-W14

media: cx231xx: set device_caps for 417

2026-03-31 CVE-2025-38044

media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe

2026-03-31 CVE-2025-39995

media: rc: fix races with imon_disconnect()

2026-03-31 CVE-2025-39993

media: tuner: xc5000: Fix use-after-free in xc5000_release

2026-03-31 CVE-2025-39994

criticalMicrosoft MSRC 2026-W14

media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID

2026-03-31 CVE-2025-40016

media: venus: hfi_parser: add check to avoid out of bound access

2026-03-31 CVE-2025-23157

media: venus: hfi_parser: refactor hfi packet parsing logic

2026-03-31 CVE-2025-23156