Source: msrc

bpf: Check the helper function is valid in get_helper_proto

2025-10-14 CVE-2025-39990

bpf: Explicitly check accesses to bpf_sock_addr

2025-10-14 CVE-2025-40078

bus: fsl-mc: Check return value of platform_get_resource()

2025-10-14 CVE-2025-40029

Cache poisoning attacks with unsolicited RRs

2025-10-14 CVE-2025-40778

Cache poisoning due to weak PRNG

2025-10-14 CVE-2025-40780

can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow

2025-10-14 CVE-2025-39988

can: hi311x: populate ndo_change_mtu() to prevent buffer overflow

2025-10-14 CVE-2025-39987

can: j1939: implement NETDEV_UNREGISTER notification handler

2025-10-14 CVE-2025-39925

criticalMicrosoft MSRC 2025-W42

can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow

2025-10-14 CVE-2025-39985

criticalMicrosoft MSRC 2025-W42

can: peak_usb: fix shift-out-of-bounds issue

2025-10-14 CVE-2025-40020

can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow

2025-10-14 CVE-2025-39986

criticalMicrosoft MSRC 2025-W42

ceph: fix race condition validating r_parent before applying state

2025-10-14 CVE-2025-39927

cgroup: split cgroup_destroy_wq into 3 workqueues

2025-10-14 CVE-2025-39953

cnic: Fix use-after-free bugs in cnic_delete_task

2025-10-14 CVE-2025-39945

comedi: fix divide-by-zero in comedi_buf_munge()

2025-10-14 CVE-2025-40106

coresight: trbe: Return NULL pointer for allocation failures

2025-10-14 CVE-2025-40060

crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

2025-10-14 CVE-2025-39964

crypto: af_alg - Set merge to zero early in af_alg_sendmsg

2025-10-14 CVE-2025-39931

crypto: essiv - Check ssize for decryption and in-place encryption

2025-10-14 CVE-2025-40019

dm-stripe: fix a possible integer overflow

2025-10-14 CVE-2025-39940

dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees

2025-10-14 CVE-2025-39923

drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ

2025-10-14 CVE-2025-39934

drm/gma500: Fix null dereference in hdmi teardown

2025-10-14 CVE-2025-40011

e1000e: fix heap overflow in e1000_set_eeprom

2025-10-14 CVE-2025-39898

criticalMicrosoft MSRC 2025-W42

Elasticsearch Insertion of sensitive information in log file

2025-10-14 CVE-2025-37727

f2fs: fix to avoid overflow while left shift operation

2025-10-14 CVE-2025-40077

f2fs: fix to do sanity check on node footer for non inode dnode

2025-10-14 CVE-2025-40025

fbcon: fix integer overflow in fbcon_do_set_font

2025-10-14 CVE-2025-39967

criticalMicrosoft MSRC 2025-W42

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attac

2025-10-14 CVE-2025-61100

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows att

2025-10-14 CVE-2025-61102

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_lan_adj_sid function at ospf_ext.c. This vulnerability allows

2025-10-14 CVE-2025-61103

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows at

2025-10-14 CVE-2025-61107

fs: udf: fix OOB read in lengthAllocDescs handling

2025-10-14 CVE-2025-40044

futex: Prevent use-after-free during requeue-PI

2025-10-14 CVE-2025-39977

GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow

2025-10-14 CVE-2025-11495

GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

2025-10-14 CVE-2025-11412

GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

2025-10-14 CVE-2025-11413

GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

2025-10-14 CVE-2025-11414

GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds

2025-10-14 CVE-2025-11494

GNU Binutils prdbg.c tg_tag_type return value

2025-10-14 CVE-2025-11839

hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()

2025-10-14 CVE-2025-40088

hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()

2025-10-14 CVE-2025-40082

i40e: add max boundary check for VF filters

2025-10-14 CVE-2025-39968

criticalMicrosoft MSRC 2025-W42

i40e: add validation for ring_len param

2025-10-14 CVE-2025-39973

criticalMicrosoft MSRC 2025-W42

i40e: fix idx validation in config queues msg

2025-10-14 CVE-2025-39971

criticalMicrosoft MSRC 2025-W42

i40e: fix idx validation in i40e_validate_queue_map

2025-10-14 CVE-2025-39972

criticalMicrosoft MSRC 2025-W42

i40e: fix input validation logic for action_meta

2025-10-14 CVE-2025-39970

criticalMicrosoft MSRC 2025-W42

i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path

2025-10-14 CVE-2025-39911

i40e: fix validation of VF state in get resources

2025-10-14 CVE-2025-39969

i40e: remove read access to debugfs files

2025-10-14 CVE-2025-39901

Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak

2025-10-14 CVE-2025-40035

iommu/amd/pgtbl: Fix possible race while increase page table level

2025-10-14 CVE-2025-39961

iommu/s390: Make attach succeed when the device was surprise removed

2025-10-14 CVE-2025-39958

ipv4: start using dst_dev_rcu()

2025-10-14 CVE-2025-40074

ipvs: Defer ip_vs_ftp unregister during netns cleanup

2025-10-14 CVE-2025-40018

ixgbevf: fix mailbox API compatibility by negotiating supported features

2025-10-14 CVE-2025-40104

ksmbd: Fix race condition in RPC handle list access

2025-10-14 CVE-2025-40039

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

2025-10-14 CVE-2025-39943

criticalMicrosoft MSRC 2025-W42

ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

2025-10-14 CVE-2025-39942