Vendor: microsoft

smb: client: Avoid race in open_cached_dir with lease breaks

2026-03-31 CVE-2025-37954

smb: client: Fix refcount leak for cifs_sb_tlink

2026-03-31 CVE-2025-40103

smb: client: fix UAF in decryption with multichannel

2026-03-31 CVE-2025-37750

smb: client: Fix use-after-free in cifs_fill_dirent

2026-03-31 CVE-2025-38051

soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()

2026-03-31 CVE-2025-23148

Software Protection Platform (SPP) Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59199

sound/virtio: Fix cancel_sync warnings on uninitialized work_structs

2026-03-31 CVE-2025-37805

spdlog pattern_formatter-inl.h scoped_padder resource consumption

2026-03-31 CVE-2025-6140

spi-rockchip: Fix register out of bounds access

2026-03-31 CVE-2025-38081

spi: fsl-qspi: use devm function instead of driver remove

2026-03-31 CVE-2025-37842

spi: spi-imx: Add check for spi_imx_setupxfer()

2026-03-31 CVE-2025-37801

Squashfs: fix uninit-value in squashfs_get_parent

2026-03-31 CVE-2025-40049

Storage Spaces Direct Information Disclosure Vulnerability

2026-03-31 CVE-2025-59184

Storport.sys Driver Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-59192

Sudo before 1.9.17p1 allows local users to obtain root access

2026-03-31 CVE-2025-32463

criticalMicrosoft MSRC 2026-W14

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL

2026-03-31 CVE-2025-32462

sunrpc: handle SVC_GARBAGE during svc auth processing as auth error

2026-03-31 CVE-2025-38089

Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

2026-03-31 CVE-2025-4598

tar-fs has issue where extract can write outside the specified dir with a specific tarball

2026-03-31 CVE-2025-48387

Tarfile extracts filtered members when errorlevel=0

2026-03-31 CVE-2025-4435

tcp_metrics: use dst_dev_net_rcu()

2026-03-31 CVE-2025-40075

The x509 application adds trusted use instead of rejected use

2026-03-31 CVE-2025-4575

tipc: fix memory leak in tipc_link_xmit

2026-03-31 CVE-2025-37757

tipc: fix NULL pointer dereference in tipc_mon_reinit_self()

2026-03-31 CVE-2025-37824

tracing: Do not let histogram values have some modifiers

2026-03-31 CVE-2023-53093

tracing: Fix oob write in trace_seq_to_buffer()

2026-03-31 CVE-2025-37923

tracing: Verify event formats that have "%*p.."

2026-03-31 CVE-2025-37938

tranport: TLS host name wildcard matching too lax

2026-03-31 CVE-2024-47619

tty: n_gsm: Don't block input queue by waiting MSC

2026-03-31 CVE-2025-40071

tty: n_gsm: fix deadlock and link starvation in outgoing data path

2026-03-31 CVE-2022-50116

ublk: fix handling recovery & reissue in ublk_abort_queue()

2026-03-31 CVE-2025-37759

udmabuf: fix a buf size overflow issue during udmabuf creation

2026-03-31 CVE-2025-37803

um: work around sched_yield not yielding in time-travel mode

2026-03-31 CVE-2025-37880

Unbounded allocation when parsing GNU sparse map in archive/tar

2026-03-31 CVE-2025-58183

Unbounded recursion in Python Protobuf

2026-03-31 CVE-2025-4565

undici Denial of Service attack via bad certificate data

2026-03-31 CVE-2025-47279

Universal Print Management Service Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-29841

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in staticall

2026-03-31 CVE-2025-4802

urllib3 does not control redirects in browsers and Node.js

2026-03-31 CVE-2025-50182

urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

2026-03-31 CVE-2025-50181

UrlMon Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-29842

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

2026-03-31 CVE-2025-22874

usb: cdns3: Fix deadlock when using NCM gadget

2026-03-31 CVE-2025-37812

usb: dwc3: gadget: check that event count does not exceed event buffer length

2026-03-31 CVE-2025-37810

usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()

2026-03-31 CVE-2025-37881

usb: gadget: f_acm: Refactor bind path to use __free()

2026-03-31 CVE-2025-40094

usb: gadget: f_ecm: Refactor bind path to use __free()

2026-03-31 CVE-2025-40093

usb: gadget: f_ncm: Refactor bind path to use __free()

2026-03-31 CVE-2025-40092

usb: gadget: f_rndis: Refactor bind path to use __free()

2026-03-31 CVE-2025-40095

USB: gadget: Fix use-after-free Read in usb_udc_uevent()

2026-03-31 CVE-2022-49980

usb: typec: ucsi: displayport: Fix deadlock

2026-03-31 CVE-2025-37967

usb: typec: ucsi: displayport: Fix NULL pointer access

2026-03-31 CVE-2025-37994

USB: wdm: close race between wdm_open and wdm_wwan_port_stop

2026-03-31 CVE-2025-37985

usb: xhci: Fix isochronous Ring Underrun/Overrun event handling

2026-03-31 CVE-2025-37882

Users: `root` appended to group listings

2026-03-31 CVE-2025-5791

vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check

2026-03-31 CVE-2023-53543

vfs: Don't leak disconnected dentries on umount

2026-03-31 CVE-2025-40105

vhost-scsi: protect vq->log_used with vq->mutex

2026-03-31 CVE-2025-38074

virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN

2026-03-31 CVE-2025-38048