Week: 2025-W33

AIDE improper output neutralization vulnerability

2025-08-12 CVE-2025-54389

AIDE null pointer dereference when reading incorrectly encoded xattr attributes from database (local DoS)

2025-08-12 CVE-2025-54409

arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()

2025-08-12 CVE-2025-38670

atm: clip: Fix memory leak of struct clip_vcc.

2025-08-12 CVE-2025-38546

Azure Portal Elevation of Privilege Vulnerability

2025-08-12 CVE-2025-53792

criticalMicrosoft MSRC 2025-W33

Azure Stack Hub Information Disclosure Vulnerability

2025-08-12 CVE-2025-53765

Azure Stack Hub Information Disclosure Vulnerability

2025-08-12 CVE-2025-53793

Azure Virtual Machines Information Disclosure Vulnerability

2025-08-12 CVE-2025-53781

Azure Virtual Machines Spoofing Vulnerability

2025-08-12 CVE-2025-49707

benet: fix BUG when creating VFs

2025-08-12 CVE-2025-38569

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

2025-08-12 CVE-2022-50233

Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'

2025-08-12 CVE-2025-38593

bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls

2025-08-12 CVE-2025-38608

bpf: Disable migration in nf_hook_run_bpf().

2025-08-12 CVE-2025-38640

bpf: Fix oob access in cgroup local storage

2025-08-12 CVE-2025-38502

bpf: Reject %p% format string in bprintf-like helpers

2025-08-12 CVE-2025-38528

bpf: Reject narrower access to pointer ctx fields

2025-08-12 CVE-2025-38591

btrfs: fix assertion when building free space tree

2025-08-12 CVE-2025-38503

Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.

2025-08-12 CVE-2025-50422

can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode

2025-08-12 CVE-2025-38665

clk: davinci: Add NULL check in davinci_lpsc_clk_register()

2025-08-12 CVE-2025-38635

clk: xilinx: vcu: unregister pll_post only if registered correctly

2025-08-12 CVE-2025-38583

clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns

2025-08-12 CVE-2025-38499

cmake cmForEachCommand.cxx ReplayItems assertion

2025-08-12 CVE-2025-9301

comedi: aio_iiro_16: Fix bit shift out of bounds

2025-08-12 CVE-2025-38529

comedi: pcl812: Fix bit shift out of bounds

2025-08-12 CVE-2025-38530

crypto: ccp - Fix crash when rebind ccp device for ccp.ko

2025-08-12 CVE-2025-38581

Desktop Window Manager Elevation of Privilege Vulnerability

2025-08-12 CVE-2025-50153

Desktop Windows Manager Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53152

DirectX Graphics Kernel Denial of Service Vulnerability

2025-08-12 CVE-2025-50172

DirectX Graphics Kernel Elevation of Privilege Vulnerability

2025-08-12 CVE-2025-53135

DirectX Graphics Kernel Remote Code Execution Vulnerability

2025-08-12 CVE-2025-50176

dmaengine: nbpfaxi: Fix memory corruption in probe()

2025-08-12 CVE-2025-38538

drm/amdkfd: Don't call mmput from MMU notifier callback

2025-08-12 CVE-2025-38520

drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port

2025-08-12 CVE-2025-38597

drm/sched: Increment job count before swapping tail spsc queue

2025-08-12 CVE-2025-38515

drm/tegra: nvdec: Fix dma_alloc_coherent error check

2025-08-12 CVE-2025-38543

eventpoll: Fix semi-unbounded recursion

2025-08-12 CVE-2025-38614

f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic

2025-08-12 CVE-2025-38627

f2fs: fix KMSAN uninit-value in extent_info usage

2025-08-12 CVE-2025-38579

f2fs: fix to avoid out-of-boundary access in devs.path

2025-08-12 CVE-2025-38652

f2fs: fix to avoid out-of-boundary access in dnode page

2025-08-12 CVE-2025-38677

f2fs: fix to avoid panic in f2fs_evict_inode

2025-08-12 CVE-2025-38577

f2fs: fix to avoid UAF in f2fs_sync_inode_meta()

2025-08-12 CVE-2025-38578

f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode

2025-08-12 CVE-2025-38626

fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref

2025-08-12 CVE-2025-38630

gfs2: No more self recovery

2025-08-12 CVE-2025-38659

GitHub Copilot and Visual Studio Remote Code Execution Vulnerability

2025-08-12 CVE-2025-53773

github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives

2025-08-12 CVE-2025-58058

GNU Bison obprintf.c __obstack_vprintf_internal assertion

2025-08-12 CVE-2025-8733

GNU Bison scan-code.c code_free double free

2025-08-12 CVE-2025-8734

Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

2025-08-12 CVE-2025-55199

Helm May Panic Due To Incorrect YAML Content

2025-08-12 CVE-2025-55198

hfsplus: remove mutex_lock check in hfsplus_free_extents

2025-08-12 CVE-2025-38650

HID: core: Harden s32ton() against conversion to 0 bits

2025-08-12 CVE-2025-38556

HID: nintendo: avoid bluetooth suspend/resume stalls

2025-08-12 CVE-2025-38507

HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

2025-08-12 CVE-2025-38540