Week: 2025-W28

fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()

2025-07-08 CVE-2025-38338

fs/ntfs3: handle hdr_first_de() return value

2025-07-08 CVE-2025-38167

ftrace: Fix UAF when lookup kallsym after ftrace disabled

2025-07-08 CVE-2025-38346

Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf

2025-07-08 CVE-2025-7345

genirq/irq_sim: Initialize work context pointers properly

2025-07-08 CVE-2025-38408

Glib: glib crash after long command line

2025-07-08 CVE-2025-4056

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

2025-07-08 CVE-2023-4527

GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference

2025-07-08 CVE-2025-8224

GNU Binutils DWARF Section dwarf.c process_debug_info memory leak

2025-07-08 CVE-2025-8225

GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write

2025-07-08 CVE-2025-7546

GNU Binutils objcopy.c copy_section heap-based overflow

2025-07-08 CVE-2025-7545

GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the victim must extract an archive that contains

2025-07-08 CVE-2025-45582

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

2025-07-08 CVE-2025-6395

Gnutls: vulnerability in gnutls certtool template parsing

2025-07-08 CVE-2025-32990

Gnutls: vulnerability in gnutls othername san export

2025-07-08 CVE-2025-32988

Gnutls: vulnerability in gnutls sct extension parsing

2025-07-08 CVE-2025-32989

Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

2025-07-08 CVE-2024-1283

mediumBSI 2025-W28

gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO

2025-07-08 CVE-2025-38122

HDF5 H5FL.c H5FL__malloc memory leak

2025-07-08 CVE-2025-7068

HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow

2025-07-08 CVE-2025-7067

HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow

2025-07-08 CVE-2025-7069

Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

2025-07-08 CVE-2025-53547

HID Class Driver Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48816

HID: core: do not bypass hid_hw_raw_request

2025-07-08 CVE-2025-38494

HID: core: ensure the allocated report buffer can contain the reserved report ID

2025-07-08 CVE-2025-38495

HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()

2025-07-08 CVE-2025-38103

hisi_acc_vfio_pci: bugfix live migration function without VF device driver

2025-07-08 CVE-2025-38283

hisi_acc_vfio_pci: fix XQE dma address error

2025-07-08 CVE-2025-38158

hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.

2025-07-08 CVE-2025-54566

hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.

2025-07-08 CVE-2025-54567

hwmon: (asus-ec-sensors) check sensor index in read_string()

2025-07-08 CVE-2025-38142

hwmon: (ftsteutates) Fix TOCTOU race in fts_read()

2025-07-08 CVE-2025-38217

i2c: tegra: check msg length in SMBUS block read

2025-07-08 CVE-2025-38425

i2c/designware: Fix an initialization issue

2025-07-08 CVE-2025-38380

i40e: fix MMIO write access to an invalid page in i40e_clear_hw

2025-07-08 CVE-2025-38200

iavf: get rid of the crit lock

2025-07-08 CVE-2025-38311

ice: fix Tx scheduler error handling in XDP callback

2025-07-08 CVE-2025-38127

iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush

2025-07-08 CVE-2025-38485

Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT

2025-07-08 CVE-2025-38335

Input: ims-pcu - check record size in ims_pcu_flash_firmware()

2025-07-08 CVE-2025-38428

Integer Truncation on SQLite

2025-07-08 CVE-2025-6965

criticalMicrosoft MSRC 2025-W28

ipc: fix to protect IPCS lookups using RCU

2025-07-08 CVE-2025-38212

ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()

2025-07-08 CVE-2025-38456

jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()

2025-07-08 CVE-2025-38337

jffs2: check jffs2_prealloc_raw_node_refs() result in few other places

2025-07-08 CVE-2025-38328

jffs2: check that raw node were preallocated before writing summary

2025-07-08 CVE-2025-38194

jfs: fix array-index-out-of-bounds read in add_missing_indices

2025-07-08 CVE-2025-38204

jfs: Fix null-ptr-deref in jfs_ioc_trim

2025-07-08 CVE-2025-38203

jfs: validate AG parameters in dbMount() to prevent crashes

2025-07-08 CVE-2025-38230

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49675

kernfs: Relax constraint in draining guard

2025-07-08 CVE-2025-38282

ksmbd: fix null pointer dereference in destroy_previous_session

2025-07-08 CVE-2025-38191

ksmbd: fix potential use-after-free in oplock/lease break ack

2025-07-08 CVE-2025-38437

ksmbd: use list_first_entry_or_null for opinfo_get_list()

2025-07-08 CVE-2025-38092

KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush

2025-07-08 CVE-2025-38351

Libssh: double free vulnerability in libssh key export functions

2025-07-08 CVE-2025-5351

Libssh: incorrect return code handling in ssh_kdf() in libssh

2025-07-08 CVE-2025-5372

Libssh: invalid return code for chacha20 poly1305 with openssl backend

2025-07-08 CVE-2025-5987

Libssh: use of uninitialized variable in privatekey_from_file()

2025-07-08 CVE-2025-4878