Week: 2026-W14

tipc: fix memory leak in tipc_link_xmit

2026-03-31 CVE-2025-37757

tipc: fix NULL pointer dereference in tipc_mon_reinit_self()

2026-03-31 CVE-2025-37824

tracing: Do not let histogram values have some modifiers

2026-03-31 CVE-2023-53093

tracing: Fix oob write in trace_seq_to_buffer()

2026-03-31 CVE-2025-37923

tracing: Verify event formats that have "%*p.."

2026-03-31 CVE-2025-37938

tranport: TLS host name wildcard matching too lax

2026-03-31 CVE-2024-47619

tty: n_gsm: Don't block input queue by waiting MSC

2026-03-31 CVE-2025-40071

tty: n_gsm: fix deadlock and link starvation in outgoing data path

2026-03-31 CVE-2022-50116

ublk: fix handling recovery & reissue in ublk_abort_queue()

2026-03-31 CVE-2025-37759

udmabuf: fix a buf size overflow issue during udmabuf creation

2026-03-31 CVE-2025-37803

um: work around sched_yield not yielding in time-travel mode

2026-03-31 CVE-2025-37880

Unbounded allocation when parsing GNU sparse map in archive/tar

2026-03-31 CVE-2025-58183

Unbounded recursion in Python Protobuf

2026-03-31 CVE-2025-4565

undici Denial of Service attack via bad certificate data

2026-03-31 CVE-2025-47279

Universal Print Management Service Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-29841

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in staticall

2026-03-31 CVE-2025-4802

urllib3 does not control redirects in browsers and Node.js

2026-03-31 CVE-2025-50182

urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

2026-03-31 CVE-2025-50181

UrlMon Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-29842

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

2026-03-31 CVE-2025-22874

usb: cdns3: Fix deadlock when using NCM gadget

2026-03-31 CVE-2025-37812

usb: dwc3: gadget: check that event count does not exceed event buffer length

2026-03-31 CVE-2025-37810

usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()

2026-03-31 CVE-2025-37881

usb: gadget: f_acm: Refactor bind path to use __free()

2026-03-31 CVE-2025-40094

usb: gadget: f_ecm: Refactor bind path to use __free()

2026-03-31 CVE-2025-40093

usb: gadget: f_ncm: Refactor bind path to use __free()

2026-03-31 CVE-2025-40092

usb: gadget: f_rndis: Refactor bind path to use __free()

2026-03-31 CVE-2025-40095

USB: gadget: Fix use-after-free Read in usb_udc_uevent()

2026-03-31 CVE-2022-49980

usb: typec: ucsi: displayport: Fix deadlock

2026-03-31 CVE-2025-37967

usb: typec: ucsi: displayport: Fix NULL pointer access

2026-03-31 CVE-2025-37994

USB: wdm: close race between wdm_open and wdm_wwan_port_stop

2026-03-31 CVE-2025-37985

usb: xhci: Fix isochronous Ring Underrun/Overrun event handling

2026-03-31 CVE-2025-37882

Users: `root` appended to group listings

2026-03-31 CVE-2025-5791

vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check

2026-03-31 CVE-2023-53543

vfs: Don't leak disconnected dentries on umount

2026-03-31 CVE-2025-40105

vhost-scsi: protect vq->log_used with vq->mutex

2026-03-31 CVE-2025-38074

virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN

2026-03-31 CVE-2025-38048

virtio: break and reset virtio devices on device_shutdown()

2026-03-31 CVE-2025-38064

virtiofs: add filesystem context source name check

2026-03-31 CVE-2025-37773

Virtual Secure Mode Spoofing Vulnerability

2026-03-31 CVE-2025-48813

Visual Studio Code Security Feature Bypass Vulnerability

2026-03-31 CVE-2025-21264

Visual Studio Elevation of Privilege Vulnerability

2026-03-31 CVE-2025-55240

Visual Studio Information Disclosure Vulnerability

2026-03-31 CVE-2025-32703

Visual Studio Remote Code Execution Vulnerability

2026-03-31 CVE-2025-32702

Visual Studio Remote Code Execution Vulnerability

2026-03-31 CVE-2025-47959

vxlan: Annotate FDB data races

2026-03-31 CVE-2025-38037

vxlan: vnifilter: Fix unlocked deletion of default FDB entry

2026-03-31 CVE-2025-37921

Web Threat Defense (WTD.sys) Denial of Service Vulnerability

2026-03-31 CVE-2025-29971

WebKitGTK: Mehrere Schwachstellen

2026-03-31 WID-SEC-2025-2657

highBSI 2026-W14

WebKitGTK: Mehrere Schwachstellen

2026-03-31 WID-SEC-2025-2751

highBSI 2026-W14

webpack-dev-server users' source code may be stolen when they access a malicious web site

2026-03-31 CVE-2025-30359

webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browser

2026-03-31 CVE-2025-30360

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform e

2026-03-31 CVE-2024-6174

wifi: at76c50x: fix use after free access in at76_disconnect

2026-03-31 CVE-2025-37796

wifi: ath12k: Avoid memory leak while enabling statistics

2026-03-31 CVE-2025-37743

wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi

2026-03-31 CVE-2025-37943

wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process

2026-03-31 CVE-2025-37944

wifi: ath12k: fix memory leak in ath12k_pci_remove()

2026-03-31 CVE-2025-37744

wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()

2026-03-31 CVE-2025-37990