Source: msrc

bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock

2025-04-08 CVE-2025-21951

caif_virtio: fix wrong pointer check in cfv_probe()

2025-04-08 CVE-2025-21904

can: ucan: fix out of bound read in strscpy() source

2025-04-08 CVE-2025-22003

cdx: Fix possible UAF error in driver_override_show()

2025-04-08 CVE-2025-21915

cifs: Fix integer overflow while processing acdirmax mount option

2025-04-08 CVE-2025-21963

cifs: Fix integer overflow while processing acregmax mount option

2025-04-08 CVE-2025-21964

cifs: Fix integer overflow while processing closetimeo mount option

2025-04-08 CVE-2025-21962

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

2025-04-08 CVE-2023-26819

clk: samsung: Fix UBSAN panic in samsung_clk_init()

2025-04-08 CVE-2025-39728

DirectX Graphics Kernel Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-29812

dlm: prevent NPD when writing a positive value to event_done

2025-04-08 CVE-2025-23131

dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature

2025-04-08 CVE-2025-21966

drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params

2025-04-08 CVE-2025-21941

drm/amd/display: Fix out-of-bound accesses

2025-04-08 CVE-2025-21985

drm/amd/display: Fix slab-use-after-free on hdcp_work

2025-04-08 CVE-2025-21968

drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV

2025-04-08 CVE-2025-38104

drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()

2025-04-08 CVE-2025-21996

drm/sched: Fix fence reference count leak

2025-04-08 CVE-2025-21995

drm/vkms: Fix use after free and double free on init error

2025-04-08 CVE-2025-22097

Elasticsearch Uncontrolled Resource Consumption vulnerability

2025-04-08 CVE-2024-52980

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

2025-04-08 CVE-2025-32433

criticalMicrosoft MSRC 2025-W15

eth: bnxt: fix truesize for mb-xdp-pass case

2025-04-08 CVE-2025-21961

ext4: avoid journaling sb update on error if journal is destroying

2025-04-08 CVE-2025-22113

ext4: fix OOB read when checking dotdot dir

2025-04-08 CVE-2025-37785

ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()

2025-04-08 CVE-2025-22121

f2fs: fix potential deadloop in prepare_compress_overwrite()

2025-04-08 CVE-2025-22127

f2fs: fix to avoid panic once fallocation fails for pinfile

2025-04-08 CVE-2025-23130

f2fs: quota: fix to avoid warning in dquot_writeback_dquots()

2025-04-08 CVE-2025-23132

fbdev: hyperv_fb: Allow graceful removal of framebuffer

2025-04-08 CVE-2025-21976

Field `file_table` of `struct module *module` is uninitialized

2025-04-08 CVE-2023-25585

Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

2025-04-08 CVE-2023-25588

fs/9p: fix NULL pointer dereference on mkdir

2025-04-08 CVE-2025-22070

fs/ntfs3: Fix a couple integer overflows on 32bit systems

2025-04-08 CVE-2025-22081

fs/ntfs3: Prevent integer overflow in hdr_first_de()

2025-04-08 CVE-2025-22080

ftrace: Avoid potential division by zero in function_stat_show()

2025-04-08 CVE-2025-21898

Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().

2025-04-08 CVE-2025-3360

Go Snowflake Driver has race condition when checking access to Easy Logging configuration file

2025-04-08 CVE-2025-46327

gpio: aggregator: protect driver attr handlers against module unload

2025-04-08 CVE-2025-21943

HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patte

2025-04-08 CVE-2025-32464

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

2025-04-08 CVE-2025-32386

Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

2025-04-08 CVE-2025-32387

HID: appleir: Fix potential NULL dereference at raw event handle

2025-04-08 CVE-2025-21948

HID: hid-steam: Fix use-after-free when detaching device

2025-04-08 CVE-2025-21923

HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

2025-04-08 CVE-2025-21928

HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition

2025-04-08 CVE-2025-37838

HTTP.sys Denial of Service Vulnerability

2025-04-08 CVE-2025-27473

hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio

2025-04-08 CVE-2025-21931

ibmvnic: Use kernel helpers for hex dumps

2025-04-08 CVE-2025-22104

ice: fix memory leak in aRFS after reset

2025-04-08 CVE-2025-21981

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xm

2025-04-08 CVE-2025-32414

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be va

2025-04-08 CVE-2025-32415

In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (ter

2025-04-08 CVE-2024-58251

In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is

2025-04-08 CVE-2025-29087

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

2025-04-08 CVE-2025-32728

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

2025-04-08 CVE-2025-46394

Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

2025-04-08 CVE-2025-22872

ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().

2025-04-08 CVE-2025-22005

iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

2025-04-08 CVE-2025-21993

jfs: add check read-only before truncation in jfs_truncate_nolock()

2025-04-08 CVE-2024-58094