Source: msrc

drop_monitor: fix incorrect initialization order

2025-03-11 CVE-2025-21862

efi: Don't map the entire mokvar table to determine its size

2025-03-11 CVE-2025-21872

encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data).

2025-03-11 CVE-2025-30348

f2fs: initialize locks earlier in f2fs_fill_super()

2025-03-11 CVE-2022-49742

geneve: Fix use-after-free in geneve_find_dev().

2025-03-11 CVE-2025-21858

Gnuplot: gnuplot segmentation fault on plot3d_points

2025-03-11 CVE-2025-31176

Gnuplot: gnuplot segmentation fault on x11_graphics

2025-03-11 CVE-2025-31181

Gnuplot: gnuplot segmentation fault on xstrftime

2025-03-11 CVE-2025-31179

go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment

2025-03-11 CVE-2025-29923

Grub2: fs/bfs: integer overflow in the bfs parser.

2025-03-11 CVE-2024-45778

Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser

2025-03-11 CVE-2024-45779

Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write

2025-03-11 CVE-2025-1125

Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)

2025-03-11 CVE-2024-45782

Grub2: fs/tar: integer overflow causes heap oob write

2025-03-11 CVE-2024-45780

Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

2025-03-11 CVE-2025-0685

Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data

2025-03-11 CVE-2025-0684

Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat

2025-03-11 CVE-2025-0686

Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data

2025-03-11 CVE-2025-0678

Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution

2025-03-11 CVE-2025-0689

gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().

2025-03-11 CVE-2025-21865

HDF5 h5 File H5SM.c H5SM_delete heap-based overflow

2025-03-11 CVE-2025-2153

HDF5 H5Faccum.c H5F__accum_free heap-based overflow

2025-03-11 CVE-2025-2915

HDF5 H5Fint.c H5F_addr_encode_len heap-based overflow

2025-03-11 CVE-2025-2923

HDF5 H5FL.c H5FL__blk_gc_list use after free

2025-03-11 CVE-2025-2913

HDF5 H5FScache.c H5FS__sinfo_Srialize_Sct_cb heap-based overflow

2025-03-11 CVE-2025-2914

HDF5 H5HLcache.c H5HL__fl_deserialize heap-based overflow

2025-03-11 CVE-2025-2924

HDF5 H5MM.c H5MM_realloc double free

2025-03-11 CVE-2025-2925

HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference

2025-03-11 CVE-2025-2926

HDF5 H5Omessage.c H5O_msg_flush heap-based overflow

2025-03-11 CVE-2025-2912

HDF5 Metadata Attribute Decoder H5MM_strndup heap-based overflow

2025-03-11 CVE-2025-2310

HDF5 Scale-Offset Filter H5Z__scaleoffset_decompress_one_byte heap-based overflow

2025-03-11 CVE-2025-2308

HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow

2025-03-11 CVE-2025-2309

Header parser of http stream wrapper does not handle folded headers

2025-03-11 CVE-2025-1217

Hercules Augeas fa.c re_case_expand null pointer dereference

2025-03-11 CVE-2025-2588

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

2025-03-11 CVE-2025-22870

ibmvnic: Don't reference skb after sending to VIOS

2025-03-11 CVE-2025-21855

Improper Input Validation in Vim

2025-03-11 CVE-2025-27423

In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the a

2025-03-11 CVE-2025-30258

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.

2025-03-11 CVE-2025-27220

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any lim

2025-03-11 CVE-2025-27219

In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained e

2025-03-11 CVE-2025-27221

io_uring: prevent opcode speculation

2025-03-11 CVE-2025-21863

iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE

2025-03-11 CVE-2025-21833

ipvlan: ensure network headers are in skb linear part

2025-03-11 CVE-2025-21891

Jinja sandbox breakout through attr filter selecting format method

2025-03-11 CVE-2025-27516

jwt-go allows excessive memory allocation during header parsing

2025-03-11 CVE-2025-30204

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24046

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24066

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24067

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24995

KEX init error results with excessive memory usage

2025-03-11 CVE-2025-30211

Khronos Group glslang Intermediate.cpp isConversionAllowed null pointer dereference

2025-03-11 CVE-2025-3010

KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()

2025-03-11 CVE-2024-58083

KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop

2025-03-11 CVE-2025-21839

Libexpat: expat: improper restriction of xml entity expansion depth in libexpat

2025-03-11 CVE-2024-8176

libxml streams use wrong content-type header when requesting a redirected resource

2025-03-11 CVE-2025-1219

list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted

2025-03-11 CVE-2025-25724

MapUrlToZone Security Feature Bypass Vulnerability

2025-03-11 CVE-2025-21247

MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.

2025-03-11 CVE-2023-52971