Security Warnings — Vendor: microsoft

iommu/s390: Make attach succeed when the device was surprise removed

2025-10-14 CVE-2025-39958

mediumMicrosoft MSRC 2025-W42

ipv4: start using dst_dev_rcu()

2025-10-14 CVE-2025-40074

highMicrosoft MSRC 2025-W42

ipvs: Defer ip_vs_ftp unregister during netns cleanup

2025-10-14 CVE-2025-40018

highMicrosoft MSRC 2025-W42

ixgbevf: fix mailbox API compatibility by negotiating supported features

2025-10-14 CVE-2025-40104

mediumMicrosoft MSRC 2025-W42

ksmbd: Fix race condition in RPC handle list access

2025-10-14 CVE-2025-40039

mediumMicrosoft MSRC 2025-W42

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

2025-10-14 CVE-2025-39943

criticalMicrosoft MSRC 2025-W42

ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

2025-10-14 CVE-2025-39942

mediumMicrosoft MSRC 2025-W42

ksmbd: transport_ipc: validate payload size before reading handle

2025-10-14 CVE-2025-40084

mediumMicrosoft MSRC 2025-W42

KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid

2025-10-14 CVE-2025-40038

mediumMicrosoft MSRC 2025-W42

KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

2025-10-14 CVE-2025-40026

lowMicrosoft MSRC 2025-W42

Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

2025-10-14 CVE-2025-12105

highMicrosoft MSRC 2025-W42

Lua library commands may lead to integer overflow and potential RCE

2025-10-14 CVE-2025-46817

highMicrosoft MSRC 2025-W42

LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames.

2025-10-14 CVE-2025-62813

mediumMicrosoft MSRC 2025-W42

media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove

2025-10-14 CVE-2025-39996

criticalMicrosoft MSRC 2025-W42

media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe

2025-10-14 CVE-2025-39995

highMicrosoft MSRC 2025-W42

media: rc: fix races with imon_disconnect()

2025-10-14 CVE-2025-39993

highMicrosoft MSRC 2025-W42

media: tuner: xc5000: Fix use-after-free in xc5000_release

2025-10-14 CVE-2025-39994

criticalMicrosoft MSRC 2025-W42

media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID

2025-10-14 CVE-2025-40016

mediumMicrosoft MSRC 2025-W42

Microsoft Windows Improper Access Control Vulnerability

2025-10-14 CVE-2025-59230

highMicrosoft CVE 2025-W42

Microsoft Windows Untrusted Pointer Dereference Vulnerability

2025-10-14 CVE-2025-24990

highMicrosoft CVE 2025-W42

misc: fastrpc: fix possible map leak in fastrpc_put_args

2025-10-14 CVE-2025-40036

highMicrosoft MSRC 2025-W42

mm: /proc/pid/smaps_rollup: fix no vma's null-deref

2025-10-14 CVE-2022-50502

mediumMicrosoft MSRC 2025-W42

mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()

2025-10-14 CVE-2025-39909

mediumMicrosoft MSRC 2025-W42

mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()

2025-10-14 CVE-2025-39916

mediumMicrosoft MSRC 2025-W42

mm/ksm: fix flag-dropping behavior in ksm_madvise

2025-10-14 CVE-2025-40040

mediumMicrosoft MSRC 2025-W42

mm/slub: avoid accessing metadata when pointer is invalid in object_err()

2025-10-14 CVE-2025-39902

mediumMicrosoft MSRC 2025-W42

mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()

2025-10-14 CVE-2025-39910

criticalMicrosoft MSRC 2025-W42

mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2()

2025-10-14 CVE-2022-50464

mediumMicrosoft MSRC 2025-W42

mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer

2025-10-14 CVE-2025-39907

criticalMicrosoft MSRC 2025-W42

nbd: restrict sockets to TCP and UDP

2025-10-14 CVE-2025-40080

mediumMicrosoft MSRC 2025-W42

net: dlink: handle copy_thresh allocation failure

2025-10-14 CVE-2025-40053

mediumMicrosoft MSRC 2025-W42

net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work

2025-10-14 CVE-2025-40003

highMicrosoft MSRC 2025-W42

net: nfc: nci: Add parameter validation for packet data

2025-10-14 CVE-2025-40043

mediumMicrosoft MSRC 2025-W42

net: phylink: add lock for serializing concurrent pl->phydev writes with resolver

2025-10-14 CVE-2025-39905

highMicrosoft MSRC 2025-W42

net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer

2025-10-14 CVE-2025-39937

mediumMicrosoft MSRC 2025-W42

net/mlx5e: Harden uplink netdev access against device unbind

2025-10-14 CVE-2025-39947

mediumMicrosoft MSRC 2025-W42

net/sched: sch_qfq: Fix null-deref in agg_dequeue

2025-10-14 CVE-2025-40083

mediumMicrosoft MSRC 2025-W42

nexthop: Forbid FDB status change while nexthop is in a group

2025-10-14 CVE-2025-39980

highMicrosoft MSRC 2025-W42

ocfs2: fix double free in user_cluster_connect()

2025-10-14 CVE-2025-40055

highMicrosoft MSRC 2025-W42

octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

2025-10-14 CVE-2025-39978

criticalMicrosoft MSRC 2025-W42

octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()

2025-10-14 CVE-2025-39944

highMicrosoft MSRC 2025-W42

Panic when validating certificates with DSA public keys in crypto/x509

2025-10-14 CVE-2025-58188

highMicrosoft MSRC 2025-W42

Parsing DER payload can cause memory exhaustion in encoding/asn1

2025-10-14 CVE-2025-58185

highMicrosoft MSRC 2025-W42

PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release

2025-10-14 CVE-2025-40032

mediumMicrosoft MSRC 2025-W42

pcmcia: Add error handling for add_interval() in do_validate_mem()

2025-10-14 CVE-2025-39920

mediumMicrosoft MSRC 2025-W42

perf: arm_spe: Prevent overflow in PERF_IDX2OFF()

2025-10-14 CVE-2025-40081

highMicrosoft MSRC 2025-W42

pinctrl: check the return value of pinmux_ops::get_function_name()

2025-10-14 CVE-2025-40030

mediumMicrosoft MSRC 2025-W42

qed: Don't collect too many protection override GRC elements

2025-10-14 CVE-2025-39949

mediumMicrosoft MSRC 2025-W42

Qemu-kvm: stack buffer overflow in e1000 device via short frames in loopback mode

2025-10-14 CVE-2025-12464

mediumMicrosoft MSRC 2025-W42

Qemu-kvm: vnc websocket handshake use-after-free

2025-10-14 CVE-2025-11234

highMicrosoft MSRC 2025-W42

quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame

2025-10-14 CVE-2025-59530

highMicrosoft MSRC 2025-W42

RDMA/rxe: Fix race in do_task() when draining

2025-10-14 CVE-2025-40061

mediumMicrosoft MSRC 2025-W42

Redis is vulnerable to DoS via specially crafted LUA scripts

2025-10-14 CVE-2025-46819

mediumMicrosoft MSRC 2025-W42

Redis Lua Use-After-Free may lead to remote code execution

2025-10-14 CVE-2025-49844

criticalMicrosoft MSRC 2025-W42

Redis: Authenticated users can execute LUA scripts as a different user

2025-10-14 CVE-2025-46818

mediumMicrosoft MSRC 2025-W42

remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()

2025-10-14 CVE-2025-40033

mediumMicrosoft MSRC 2025-W42

Resource exhaustion via malformed DNSKEY handling

2025-10-14 CVE-2025-8677

highMicrosoft MSRC 2025-W42

sched: Fix sched_numa_find_nth_cpu() if mask offline

2025-10-14 CVE-2025-39895

mediumMicrosoft MSRC 2025-W42

scsi: mvsas: Fix use-after-free bugs in mvs_work_queue

2025-10-14 CVE-2025-40001

highMicrosoft MSRC 2025-W42

scsi: target: target_core_configfs: Add length check to avoid buffer overflow

2025-10-14 CVE-2025-39998

highMicrosoft MSRC 2025-W42