Source: msrc

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

2026-03-31 CVE-2025-61985

Storage Spaces Direct Information Disclosure Vulnerability

2026-03-31 CVE-2025-59184

Storport.sys Driver Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59192

Sudo before 1.9.17p1 allows local users to obtain root access

2026-03-31 CVE-2025-32463

criticalMicrosoft MSRC 2026-W14

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL

2026-03-31 CVE-2025-32462

sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

2026-03-31 CVE-2025-38089

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

2026-03-31 CVE-2025-4598

tar-fs has issue where extract can write outside the specified dir with a specific tarball

2026-03-31 CVE-2025-48387

Tarfile extracts filtered members when errorlevel=0

2026-03-31 CVE-2025-4435

tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.

2026-03-31 CVE-2025-39913

tcp_metrics: use dst_dev_net_rcu()

2026-03-31 CVE-2025-40075

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

2026-03-31 CVE-2025-39955

The x509 application adds trusted use instead of rejected use

2026-03-31 CVE-2025-4575

tipc: fix memory leak in tipc_link_xmit

2026-03-31 CVE-2025-37757

tipc: fix NULL pointer dereference in tipc_mon_reinit_self()

2026-03-31 CVE-2025-37824

tls: make sure to abort the stream if headers are bogus

2026-03-31 CVE-2025-39946

tracing: Do not let histogram values have some modifiers

2026-03-31 CVE-2023-53093

tracing: dynevent: Add a missing lockdown check on dynevent

2026-03-31 CVE-2025-40021

tracing: Fix oob write in trace_seq_to_buffer()

2026-03-31 CVE-2025-37923

tracing: Fix race condition in kprobe initialization causing NULL pointer dereference

2026-03-31 CVE-2025-40042

tracing: Silence warning when chunk allocation fails in trace_pid_write

2026-03-31 CVE-2025-39914

tracing: Verify event formats that have "%*p.."

2026-03-31 CVE-2025-37938

tranport: TLS host name wildcard matching too lax

2026-03-31 CVE-2024-47619

tty: n_gsm: Don't block input queue by waiting MSC

2026-03-31 CVE-2025-40071

tty: n_gsm: fix deadlock and link starvation in outgoing data path

2026-03-31 CVE-2022-50116

ublk: fix handling recovery & reissue in ublk_abort_queue()

2026-03-31 CVE-2025-37759

udmabuf: fix a buf size overflow issue during udmabuf creation

2026-03-31 CVE-2025-37803

uio_hv_generic: Let userspace take care of interrupt mask

2026-03-31 CVE-2025-40048

um: virtio_uml: Fix use-after-free after put_device in probe

2026-03-31 CVE-2025-39951

um: work around sched_yield not yielding in time-travel mode

2026-03-31 CVE-2025-37880

Unbounded allocation when parsing GNU sparse map in archive/tar

2026-03-31 CVE-2025-58183

Unbounded recursion in Python Protobuf

2026-03-31 CVE-2025-4565

undici Denial of Service attack via bad certificate data

2026-03-31 CVE-2025-47279

Universal Print Management Service Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-29841

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in staticall

2026-03-31 CVE-2025-4802

urllib3 does not control redirects in browsers and Node.js

2026-03-31 CVE-2025-50182

urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

2026-03-31 CVE-2025-50181

UrlMon Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-29842

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

2026-03-31 CVE-2025-22874

usb: cdns3: Fix deadlock when using NCM gadget

2026-03-31 CVE-2025-37812

usb: dwc3: gadget: check that event count does not exceed event buffer length

2026-03-31 CVE-2025-37810

usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()

2026-03-31 CVE-2025-37881

usb: gadget: f_acm: Refactor bind path to use __free()

2026-03-31 CVE-2025-40094

usb: gadget: f_ecm: Refactor bind path to use __free()

2026-03-31 CVE-2025-40093

usb: gadget: f_ncm: Refactor bind path to use __free()

2026-03-31 CVE-2025-40092

usb: gadget: f_rndis: Refactor bind path to use __free()

2026-03-31 CVE-2025-40095

USB: gadget: Fix use-after-free Read in usb_udc_uevent()

2026-03-31 CVE-2022-49980

usb: typec: ucsi: displayport: Fix deadlock

2026-03-31 CVE-2025-37967

usb: typec: ucsi: displayport: Fix NULL pointer access

2026-03-31 CVE-2025-37994

USB: wdm: close race between wdm_open and wdm_wwan_port_stop

2026-03-31 CVE-2025-37985

usb: xhci: Fix isochronous Ring Underrun/Overrun event handling

2026-03-31 CVE-2025-37882

Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG

2026-03-31 CVE-2025-10729

criticalMicrosoft MSRC 2026-W14

Users: `root` appended to group listings

2026-03-31 CVE-2025-5791

vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check

2026-03-31 CVE-2023-53543

vfs: Don't leak disconnected dentries on umount

2026-03-31 CVE-2025-40105

vhost-scsi: protect vq->log_used with vq->mutex

2026-03-31 CVE-2025-38074

vhost: Take a reference on the task in struct vhost_task.

2026-03-31 CVE-2025-40024

vhost: vringh: Fix copy_to_iter return value check

2026-03-31 CVE-2025-40056

vhost: vringh: Modify the return value check

2026-03-31 CVE-2025-40051