Source: msrc

tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

2025-10-14 CVE-2025-39955

tls: make sure to abort the stream if headers are bogus

2025-10-14 CVE-2025-39946

tracing: dynevent: Add a missing lockdown check on dynevent

2025-10-14 CVE-2025-40021

tracing: Fix race condition in kprobe initialization causing NULL pointer dereference

2025-10-14 CVE-2025-40042

tracing: Silence warning when chunk allocation fails in trace_pid_write

2025-10-14 CVE-2025-39914

uio_hv_generic: Let userspace take care of interrupt mask

2025-10-14 CVE-2025-40048

um: virtio_uml: Fix use-after-free after put_device in probe

2025-10-14 CVE-2025-39951

Use-after-free vulnerability in Qt SVG qsvghandler.cpp allows denial of service via crafted SVG

2025-10-14 CVE-2025-10729

criticalMicrosoft MSRC 2025-W42

vhost: Take a reference on the task in struct vhost_task.

2025-10-14 CVE-2025-40024

vhost: vringh: Fix copy_to_iter return value check

2025-10-14 CVE-2025-40056

vhost: vringh: Modify the return value check

2025-10-14 CVE-2025-40051

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2025-10-14 CVE-2025-53044

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2025-10-14 CVE-2025-53045

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2025-10-14 CVE-2025-53054

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitabl

2025-10-14 CVE-2025-53062

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4

2025-10-14 CVE-2025-53069

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily explo

2025-10-14 CVE-2025-53053

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily

2025-10-14 CVE-2025-53040

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily

2025-10-14 CVE-2025-53042

wifi: mac80211: increase scan_ies_len for S1G

2025-10-14 CVE-2025-39957

wifi: mwifiex: Initialize the chan_stats array to zero

2025-10-14 CVE-2025-39891

wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()

2025-10-14 CVE-2025-40000

criticalMicrosoft MSRC 2025-W42

wifi: wilc1000: avoid buffer overflow in WID string configuration

2025-10-14 CVE-2025-39952

x86: fix clear_user_rep_good() exception handling annotation

2025-10-14 CVE-2023-53642

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

2025-10-14 CVE-2025-39965

XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT extension funct

2025-10-14 CVE-2024-31573

Xorg: xmayland: use-after-free in xpresentnotify structure creation

2025-10-14 CVE-2025-62229

Xorg: xmayland: value overflow in xkbsetcompatmap()

2025-10-14 CVE-2025-62231

ZIP64 End of Central Directory (EOCD) Locator record offset not checked

2025-10-14 CVE-2025-8291

A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Ind

2025-09-09 CVE-2025-55558

A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).

2025-09-09 CVE-2025-55557

A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).

2025-09-09 CVE-2025-55553

accel/habanalabs: fix mem leak in capture user mappings

2025-09-09 CVE-2023-53367

accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release()

2025-09-09 CVE-2023-53353

ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered

2025-09-09 CVE-2025-39763

ACPI: pfr_update: Fix the driver update version check

2025-09-09 CVE-2025-39701

ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value

2025-09-09 CVE-2022-50327

ACPI: processor: perflib: Move problematic pr->performance check

2025-09-09 CVE-2025-39799

Agentic AI and Visual Studio Code Remote Code Execution Vulnerability

2025-09-09 CVE-2025-55319

ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control

2025-09-09 CVE-2025-39751

ALSA: usb-audio: Validate UAC3 cluster segment descriptors

2025-09-09 CVE-2025-39757

ALSA: usb-audio: Validate UAC3 power domain descriptors, too

2025-09-09 CVE-2025-38729

An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.

2025-09-09 CVE-2025-55560

An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.

2025-09-09 CVE-2025-55551

Arbitary Code execution in Keras load_model()

2025-09-09 CVE-2025-9905

Arbitrary Code execution in Keras Safe Mode

2025-09-09 CVE-2025-9906

ARM: rockchip: fix kernel hang during smp initialization

2025-09-09 CVE-2025-39752

ARM: tegra: Use I/O memcpy to write to IRAM

2025-09-09 CVE-2025-39794

ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()

2025-09-09 CVE-2025-38706

atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().

2025-09-09 CVE-2025-39828

ax25: properly unshare skbs in ax25_kiss_rcv()

2025-09-09 CVE-2025-39848

axboe fio init.c __parse_jobs_ini use after free

2025-09-09 CVE-2025-10824

axboe fio options.c str_buffer_pattern_cb null pointer dereference

2025-09-09 CVE-2025-10823

lowMicrosoft MSRC 2025-W37

Axios is vulnerable to DoS attack through lack of data size check

2025-09-09 CVE-2025-58754

Azure Bot Service Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-55244

criticalMicrosoft MSRC 2025-W37

Azure Connected Machine Agent Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-49692

Azure Connected Machine Agent Elevation of Privilege Vulnerability

2025-09-09 CVE-2025-55316