Source: msrc

tcp: drop secpath at the same time as we currently drop dst

2025-03-11 CVE-2025-21864

team: prevent adding a device which is already a team device lower

2025-03-11 CVE-2024-58071

thermal: core: call put_device() only after device_register() fails

2025-03-11 CVE-2023-53012

lowMicrosoft MSRC 2025-W11

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.

2025-03-11 CVE-2024-9042

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume f

2025-03-11 CVE-2025-1767

uprobes: Reject the shared zeropage in uprobe_write_opcode()

2025-03-11 CVE-2025-21881

usb: gadget: core: flush gadget workqueue after device removal

2025-03-11 CVE-2025-21838

USB: gadget: f_midi: f_midi_complete to call queue_work

2025-03-11 CVE-2025-21859

usb: gadget: f_tcm: Don't free command immediately

2025-03-11 CVE-2024-58055

Vim vulnerable to potential data loss with zip.vim and special crafted zip files

2025-03-11 CVE-2025-29768

Visual Studio Code Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-26631

Visual Studio Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24998

Visual Studio Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-25003

wifi: rtlwifi: fix memory leaks and invalid access at probe error path

2025-03-11 CVE-2024-58063

WinDbg Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24043

Windows Common Log File System Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24059

Windows Core Messaging Elevation of Privileges Vulnerability

2025-03-11 CVE-2025-26634

Windows Domain Name Service Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24064

Windows exFAT File System Remote Code Execution Vulnerability

2025-03-11 CVE-2025-21180

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24985

Windows Hyper-V Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24048

Windows Hyper-V Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24050

Windows Mark of the Web Security Feature Bypass Vulnerability

2025-03-11 CVE-2025-24061

Windows NTFS Information Disclosure Vulnerability

2025-03-11 CVE-2025-24984

Windows NTFS Information Disclosure Vulnerability

2025-03-11 CVE-2025-24991

Windows NTFS Information Disclosure Vulnerability

2025-03-11 CVE-2025-24992

Windows NTFS Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24993

Windows Remote Desktop Services Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24035

Windows Remote Desktop Services Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24045

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24051

Windows Server Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-25008

Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24084

Windows Telephony Service Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24056

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24987

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24988

Windows USB Video Class System Driver Information Disclosure Vulnerability

2025-03-11 CVE-2025-24055

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24044

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24983

xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue

2025-03-11 CVE-2024-55549

Microsoft Azure: Mehrere Schwachstellen ermöglichen Privilegieneskalation

2025-03-02 CVE-2024-35253

highMSRC 2025-W09

`gh attestation verify` returns incorrect exit code during verification if no attestations are present

2025-02-11 CVE-2025-25204

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

2025-02-11 CVE-2024-57075

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Den

2025-02-11 CVE-2025-0426

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.

2025-02-11 CVE-2024-57257

lowMicrosoft MSRC 2025-W07

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0

2025-02-11 CVE-2024-57256

An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem.

2025-02-11 CVE-2024-57254

An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and listening on an IP address and port, one can send a packet with Content-Length: 0 an

2025-02-11 CVE-2024-50609

An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running and listening on an IP address and port, one can send a packet with Content-Le

2025-02-11 CVE-2024-50608

arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

2025-02-11 CVE-2025-21785

ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe

2025-02-11 CVE-2022-49161

ath11k: Change max no of active probe SSID and BSSID to fw capability

2025-02-11 CVE-2022-49533

ath11k: Fix frames flush failure caused by deadlock

2025-02-11 CVE-2022-49123

ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt

2025-02-11 CVE-2025-21792

binfmt_flat: Fix integer overflow bug on 32 bit systems

2025-02-11 CVE-2024-58010

blk-throttle: Set BIO_THROTTLED when bio has been throttled

2025-02-11 CVE-2022-49465

Bluetooth: hci_event: Ignore multiple conn complete events

2025-02-11 CVE-2022-49138

btrfs: do proper folio cleanup when cow_file_range() failed

2025-02-11 CVE-2024-57976

btrfs: do proper folio cleanup when run_delalloc_nocow() failed

2025-02-11 CVE-2024-57975