Security Warnings — Week: 2025-W15

rtnetlink: Allocate vfinfo size for VF GUIDs when supported

2025-04-08 CVE-2025-22075

mediumMicrosoft MSRC 2025-W15

Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`

2025-04-08 CVE-2025-3416

lowMicrosoft MSRC 2025-W15

sched: address a potential NULL pointer dereference in the GRED scheduler.

2025-04-08 CVE-2025-21980

mediumMicrosoft MSRC 2025-W15

sched/fair: Fix potential memory corruption in child_cfs_rq_on_list

2025-04-08 CVE-2025-21919

highMicrosoft MSRC 2025-W15

scsi: qla1280: Fix kernel oops when debug level > 2

2025-04-08 CVE-2025-21957

mediumMicrosoft MSRC 2025-W15

sctp: add mutual exclusion in proc_sctp_do_udp_port()

2025-04-08 CVE-2025-22062

mediumMicrosoft MSRC 2025-W15

sfc: fix NULL dereferences in ef100_process_design_param()

2025-04-08 CVE-2025-37860

mediumMicrosoft MSRC 2025-W15

spufs: fix a leak in spufs_create_context()

2025-04-08 CVE-2025-22071

mediumMicrosoft MSRC 2025-W15

spufs: fix a leak on spufs_new_file() failure

2025-04-08 CVE-2025-22073

mediumMicrosoft MSRC 2025-W15

spufs: fix gang directory lifetimes

2025-04-08 CVE-2025-22072

mediumMicrosoft MSRC 2025-W15

The giflib open-source component has a buffer overflow vulnerability

2025-04-08 CVE-2025-31344

highMicrosoft MSRC 2025-W15

thermal: int340x: Add NULL check for adev

2025-04-08 CVE-2025-23136

mediumMicrosoft MSRC 2025-W15

tracing: Fix bad hist from corrupting named_triggers list

2025-04-08 CVE-2025-21899

mediumMicrosoft MSRC 2025-W15

tracing: Fix use-after-free in print_graph_function_flags during tracer switching

2025-04-08 CVE-2025-22035

highMicrosoft MSRC 2025-W15

udp: Fix memory accounting leak.

2025-04-08 CVE-2025-22058

highMicrosoft MSRC 2025-W15

usb: renesas_usbhs: Flush the notify_hotplug_work

2025-04-08 CVE-2025-21917

mediumMicrosoft MSRC 2025-W15

usb: typec: ucsi: Fix NULL pointer access

2025-04-08 CVE-2025-21918

mediumMicrosoft MSRC 2025-W15

usb: xhci: Apply the link chain quirk on NEC isoc endpoints

2025-04-08 CVE-2025-22022

mediumMicrosoft MSRC 2025-W15

vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint

2025-04-08 CVE-2025-22083

highMicrosoft MSRC 2025-W15

Visual Studio Code Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-32726

mediumMicrosoft MSRC 2025-W15

Visual Studio Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-29802

highMicrosoft MSRC 2025-W15

Visual Studio Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-29804

highMicrosoft MSRC 2025-W15

Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-29803

highMicrosoft MSRC 2025-W15

vlan: enforce underlying device type

2025-04-08 CVE-2025-21920

highMicrosoft MSRC 2025-W15

vmxnet3: unregister xdp rxq info in the reset path

2025-04-08 CVE-2025-22106

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-21575

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-21580

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-30696

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-30703

lowMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-30704

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit v

2025-04-08 CVE-2025-30715

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-21581

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-21584

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-21585

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-30699

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-30705

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL

2025-04-08 CVE-2025-30721

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)

2025-04-08 CVE-2025-21577

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitabl

2025-04-08 CVE-2025-30693

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitabl

2025-04-08 CVE-2025-30695

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily

2025-04-08 CVE-2025-30682

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily

2025-04-08 CVE-2025-30687

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily

2025-04-08 CVE-2025-30688

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily

2025-04-08 CVE-2025-30689

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily e

2025-04-08 CVE-2025-21579

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily ex

2025-04-08 CVE-2025-21574

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easi

2025-04-08 CVE-2025-30681

lowMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easi

2025-04-08 CVE-2025-30683

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easi

2025-04-08 CVE-2025-30684

mediumMicrosoft MSRC 2025-W15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easi

2025-04-08 CVE-2025-30685

mediumMicrosoft MSRC 2025-W15

wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode

2025-04-08 CVE-2024-58096

mediumMicrosoft MSRC 2025-W15

wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path

2025-04-08 CVE-2025-23129

mediumMicrosoft MSRC 2025-W15

wifi: ath11k: fix RCU stall while reaping monitor destination ring

2025-04-08 CVE-2024-58097

mediumMicrosoft MSRC 2025-W15

wifi: ath11k: update channel list in reg notifier instead reg worker

2025-04-08 CVE-2025-23133

highMicrosoft MSRC 2025-W15

wifi: cfg80211: cancel wiphy_work before freeing wiphy

2025-04-08 CVE-2025-21979

highMicrosoft MSRC 2025-W15

wifi: iwlwifi: limit printed string from FW file

2025-04-08 CVE-2025-21905

mediumMicrosoft MSRC 2025-W15

Win32k Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-26681

mediumMicrosoft MSRC 2025-W15

Win32k Elevation of Privilege Vulnerability

2025-04-08 CVE-2025-26687

highMicrosoft MSRC 2025-W15

Windows Admin Center in Azure Portal Information Disclosure Vulnerability

2025-04-08 CVE-2025-29819

mediumMicrosoft MSRC 2025-W15

Windows BitLocker Security Feature Bypass Vulnerability

2025-04-08 CVE-2025-26637

mediumMicrosoft MSRC 2025-W15