Security Warnings — Source: msrc

ppp: Fix KMSAN uninit-value warning with bpf

2025-04-08 CVE-2025-21922

mediumMicrosoft MSRC 2025-W15

proc: fix UAF in proc_get_inode()

2025-04-08 CVE-2025-21999

highMicrosoft MSRC 2025-W15

PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of service

2025-04-08 CVE-2025-3730

lowMicrosoft MSRC 2025-W15

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

2025-04-08 CVE-2025-32434

criticalMicrosoft MSRC 2025-W15

rapidio: fix an API misues when rio_add_net() fails

2025-04-08 CVE-2025-21934

highMicrosoft MSRC 2025-W15

RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()

2025-04-08 CVE-2025-22088

highMicrosoft MSRC 2025-W15

RDMA/hns: Fix soft lockup during bt pages loop

2025-04-08 CVE-2025-22010

mediumMicrosoft MSRC 2025-W15

RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow

2025-04-08 CVE-2025-22086

mediumMicrosoft MSRC 2025-W15

Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

2025-04-08 CVE-2025-21605

highMicrosoft MSRC 2025-W15

Reference counting in php_request_shutdown causes Use-After-Free

2025-04-08 CVE-2024-11235

highMicrosoft MSRC 2025-W15

regulator: dummy: force synchronous probing

2025-04-08 CVE-2025-22009

mediumMicrosoft MSRC 2025-W15

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2025-04-08 CVE-2025-22029

mediumMicrosoft MSRC 2025-W15

Remote Desktop Client Remote Code Execution Vulnerability

2025-04-08 CVE-2025-27487

highMicrosoft MSRC 2025-W15

remoteproc: core: Clear table_sz when rproc_shutdown

2025-04-08 CVE-2025-38152

mediumMicrosoft MSRC 2025-W15

Request smuggling due to acceptance of invalid chunked data in net/http

2025-04-08 CVE-2025-22871

highMicrosoft MSRC 2025-W15

RISC-V: KVM: Teardown riscv specific bits after kvm_exit

2025-04-08 CVE-2025-23135

mediumMicrosoft MSRC 2025-W15

RPC Endpoint Mapper Service Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-26679

highMicrosoft MSRC 2025-W15

rtnetlink: Allocate vfinfo size for VF GUIDs when supported

2025-04-08 CVE-2025-22075

mediumMicrosoft MSRC 2025-W15

Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`

2025-04-08 CVE-2025-3416

lowMicrosoft MSRC 2025-W15

sched: address a potential NULL pointer dereference in the GRED scheduler.

2025-04-08 CVE-2025-21980

mediumMicrosoft MSRC 2025-W15

sched/fair: Fix potential memory corruption in child_cfs_rq_on_list

2025-04-08 CVE-2025-21919

highMicrosoft MSRC 2025-W15

scsi: qla1280: Fix kernel oops when debug level > 2

2025-04-08 CVE-2025-21957

mediumMicrosoft MSRC 2025-W15

sctp: add mutual exclusion in proc_sctp_do_udp_port()

2025-04-08 CVE-2025-22062

mediumMicrosoft MSRC 2025-W15

sfc: fix NULL dereferences in ef100_process_design_param()

2025-04-08 CVE-2025-37860

mediumMicrosoft MSRC 2025-W15

spufs: fix a leak in spufs_create_context()

2025-04-08 CVE-2025-22071

mediumMicrosoft MSRC 2025-W15

spufs: fix a leak on spufs_new_file() failure

2025-04-08 CVE-2025-22073

mediumMicrosoft MSRC 2025-W15

spufs: fix gang directory lifetimes

2025-04-08 CVE-2025-22072

mediumMicrosoft MSRC 2025-W15

The giflib open-source component has a buffer overflow vulnerability

2025-04-08 CVE-2025-31344

highMicrosoft MSRC 2025-W15

thermal: int340x: Add NULL check for adev

2025-04-08 CVE-2025-23136

mediumMicrosoft MSRC 2025-W15

tracing: Fix bad hist from corrupting named_triggers list

2025-04-08 CVE-2025-21899

mediumMicrosoft MSRC 2025-W15

tracing: Fix use-after-free in print_graph_function_flags during tracer switching

2025-04-08 CVE-2025-22035

highMicrosoft MSRC 2025-W15

udp: Fix memory accounting leak.

2025-04-08 CVE-2025-22058

highMicrosoft MSRC 2025-W15

usb: renesas_usbhs: Flush the notify_hotplug_work

2025-04-08 CVE-2025-21917

mediumMicrosoft MSRC 2025-W15

usb: typec: ucsi: Fix NULL pointer access

2025-04-08 CVE-2025-21918

mediumMicrosoft MSRC 2025-W15

usb: xhci: Apply the link chain quirk on NEC isoc endpoints

2025-04-08 CVE-2025-22022

mediumMicrosoft MSRC 2025-W15

vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint

2025-04-08 CVE-2025-22083

highMicrosoft MSRC 2025-W15

Visual Studio Code Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-32726

mediumMicrosoft MSRC 2025-W15

Visual Studio Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-29802

highMicrosoft MSRC 2025-W15

Visual Studio Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-29804

highMicrosoft MSRC 2025-W15

Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-29803

highMicrosoft MSRC 2025-W15

vlan: enforce underlying device type

2025-04-08 CVE-2025-21920

highMicrosoft MSRC 2025-W15

vmxnet3: unregister xdp rxq info in the reset path

2025-04-08 CVE-2025-22106

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-21575

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-21580

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-30696

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-30703

lowMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-30704

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-30715

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-21581

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-21584

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-21585

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-30699

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-30705

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-30721

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)

2025-04-08 CVE-2025-21577

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitabl

2025-04-08 CVE-2025-30693

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitabl

2025-04-08 CVE-2025-30695

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily

2025-04-08 CVE-2025-30682

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily

2025-04-08 CVE-2025-30687

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily

2025-04-08 CVE-2025-30688

mediumMicrosoft MSRC 2025-W15