Security Warnings — Source: msrc

ksmbd: transport_ipc: validate payload size before reading handle

2025-10-14 CVE-2025-40084

mediumMicrosoft MSRC 2025-W42

KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid

2025-10-14 CVE-2025-40038

mediumMicrosoft MSRC 2025-W42

KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

2025-10-14 CVE-2025-40026

lowMicrosoft MSRC 2025-W42

Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

2025-10-14 CVE-2025-12105

highMicrosoft MSRC 2025-W42

Lua library commands may lead to integer overflow and potential RCE

2025-10-14 CVE-2025-46817

highMicrosoft MSRC 2025-W42

LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames.

2025-10-14 CVE-2025-62813

mediumMicrosoft MSRC 2025-W42

media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove

2025-10-14 CVE-2025-39996

criticalMicrosoft MSRC 2025-W42

media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe

2025-10-14 CVE-2025-39995

highMicrosoft MSRC 2025-W42

media: rc: fix races with imon_disconnect()

2025-10-14 CVE-2025-39993

highMicrosoft MSRC 2025-W42

media: tuner: xc5000: Fix use-after-free in xc5000_release

2025-10-14 CVE-2025-39994

criticalMicrosoft MSRC 2025-W42

media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID

2025-10-14 CVE-2025-40016

mediumMicrosoft MSRC 2025-W42

misc: fastrpc: fix possible map leak in fastrpc_put_args

2025-10-14 CVE-2025-40036

highMicrosoft MSRC 2025-W42

mm: /proc/pid/smaps_rollup: fix no vma's null-deref

2025-10-14 CVE-2022-50502

mediumMicrosoft MSRC 2025-W42

mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()

2025-10-14 CVE-2025-39909

mediumMicrosoft MSRC 2025-W42

mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()

2025-10-14 CVE-2025-39916

mediumMicrosoft MSRC 2025-W42

mm/ksm: fix flag-dropping behavior in ksm_madvise

2025-10-14 CVE-2025-40040

mediumMicrosoft MSRC 2025-W42

mm/slub: avoid accessing metadata when pointer is invalid in object_err()

2025-10-14 CVE-2025-39902

mediumMicrosoft MSRC 2025-W42

mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()

2025-10-14 CVE-2025-39910

criticalMicrosoft MSRC 2025-W42

mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2()

2025-10-14 CVE-2022-50464

mediumMicrosoft MSRC 2025-W42

mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer

2025-10-14 CVE-2025-39907

criticalMicrosoft MSRC 2025-W42

nbd: restrict sockets to TCP and UDP

2025-10-14 CVE-2025-40080

mediumMicrosoft MSRC 2025-W42

net: dlink: handle copy_thresh allocation failure

2025-10-14 CVE-2025-40053

mediumMicrosoft MSRC 2025-W42

net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work

2025-10-14 CVE-2025-40003

highMicrosoft MSRC 2025-W42

net: nfc: nci: Add parameter validation for packet data

2025-10-14 CVE-2025-40043

mediumMicrosoft MSRC 2025-W42

net: phylink: add lock for serializing concurrent pl->phydev writes with resolver

2025-10-14 CVE-2025-39905

highMicrosoft MSRC 2025-W42

net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer

2025-10-14 CVE-2025-39937

mediumMicrosoft MSRC 2025-W42

net/mlx5e: Harden uplink netdev access against device unbind

2025-10-14 CVE-2025-39947

mediumMicrosoft MSRC 2025-W42

net/sched: sch_qfq: Fix null-deref in agg_dequeue

2025-10-14 CVE-2025-40083

mediumMicrosoft MSRC 2025-W42

nexthop: Forbid FDB status change while nexthop is in a group

2025-10-14 CVE-2025-39980

highMicrosoft MSRC 2025-W42

ocfs2: fix double free in user_cluster_connect()

2025-10-14 CVE-2025-40055

highMicrosoft MSRC 2025-W42

octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

2025-10-14 CVE-2025-39978

criticalMicrosoft MSRC 2025-W42

octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()

2025-10-14 CVE-2025-39944

highMicrosoft MSRC 2025-W42

Panic when validating certificates with DSA public keys in crypto/x509

2025-10-14 CVE-2025-58188

highMicrosoft MSRC 2025-W42

Parsing DER payload can cause memory exhaustion in encoding/asn1

2025-10-14 CVE-2025-58185

highMicrosoft MSRC 2025-W42

PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release

2025-10-14 CVE-2025-40032

mediumMicrosoft MSRC 2025-W42

pcmcia: Add error handling for add_interval() in do_validate_mem()

2025-10-14 CVE-2025-39920

mediumMicrosoft MSRC 2025-W42

perf: arm_spe: Prevent overflow in PERF_IDX2OFF()

2025-10-14 CVE-2025-40081

highMicrosoft MSRC 2025-W42

pinctrl: check the return value of pinmux_ops::get_function_name()

2025-10-14 CVE-2025-40030

mediumMicrosoft MSRC 2025-W42

qed: Don't collect too many protection override GRC elements

2025-10-14 CVE-2025-39949

mediumMicrosoft MSRC 2025-W42

Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode

2025-10-14 CVE-2025-12464

mediumMicrosoft MSRC 2025-W42

Qemu-kvm: vnc websocket handshake use-after-free

2025-10-14 CVE-2025-11234

highMicrosoft MSRC 2025-W42

quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame

2025-10-14 CVE-2025-59530

highMicrosoft MSRC 2025-W42

RDMA/rxe: Fix race in do_task() when draining

2025-10-14 CVE-2025-40061

mediumMicrosoft MSRC 2025-W42

Redis is vulnerable to DoS via specially crafted LUA scripts

2025-10-14 CVE-2025-46819

mediumMicrosoft MSRC 2025-W42

Redis Lua Use-After-Free may lead to remote code execution

2025-10-14 CVE-2025-49844

criticalMicrosoft MSRC 2025-W42

Redis: Authenticated users can execute LUA scripts as a different user

2025-10-14 CVE-2025-46818

mediumMicrosoft MSRC 2025-W42

remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()

2025-10-14 CVE-2025-40033

mediumMicrosoft MSRC 2025-W42

Resource exhaustion via malformed DNSKEY handling

2025-10-14 CVE-2025-8677

highMicrosoft MSRC 2025-W42

sched: Fix sched_numa_find_nth_cpu() if mask offline

2025-10-14 CVE-2025-39895

mediumMicrosoft MSRC 2025-W42

scsi: mvsas: Fix use-after-free bugs in mvs_work_queue

2025-10-14 CVE-2025-40001

highMicrosoft MSRC 2025-W42

scsi: target: target_core_configfs: Add length check to avoid buffer overflow

2025-10-14 CVE-2025-39998

highMicrosoft MSRC 2025-W42

smb: client: fix crypto buffers in non-linear memory

2025-10-14 CVE-2025-40052

highMicrosoft MSRC 2025-W42

smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

2025-10-14 CVE-2025-39929

mediumMicrosoft MSRC 2025-W42

smb: client: let recv_done verify data_offset, data_length and remaining_data_length

2025-10-14 CVE-2025-39933

mediumMicrosoft MSRC 2025-W42

smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)

2025-10-14 CVE-2025-39932

mediumMicrosoft MSRC 2025-W42

smc: Fix use-after-free in __pnet_find_base_ndev().

2025-10-14 CVE-2025-40064

mediumMicrosoft MSRC 2025-W42

spi: cadence-quadspi: Implement refcount to handle unbind during busy

2025-10-14 CVE-2025-40005

mediumMicrosoft MSRC 2025-W42

Squid vulnerable to information disclosure via authentication credential leakage in error handling

2025-10-14 CVE-2025-62168

criticalMicrosoft MSRC 2025-W42

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand

2025-10-14 CVE-2025-61984

lowMicrosoft MSRC 2025-W42

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

2025-10-14 CVE-2025-61985

lowMicrosoft MSRC 2025-W42