Week: 2025-W15

Elasticsearch Uncontrolled Resource Consumption vulnerability

2025-04-08 CVE-2024-52980

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

2025-04-08 CVE-2025-32433

criticalMicrosoft MSRC 2025-W15

eth: bnxt: fix truesize for mb-xdp-pass case

2025-04-08 CVE-2025-21961

ext4: avoid journaling sb update on error if journal is destroying

2025-04-08 CVE-2025-22113

ext4: fix OOB read when checking dotdot dir

2025-04-08 CVE-2025-37785

ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()

2025-04-08 CVE-2025-22121

f2fs: fix potential deadloop in prepare_compress_overwrite()

2025-04-08 CVE-2025-22127

f2fs: fix to avoid panic once fallocation fails for pinfile

2025-04-08 CVE-2025-23130

f2fs: quota: fix to avoid warning in dquot_writeback_dquots()

2025-04-08 CVE-2025-23132

fbdev: hyperv_fb: Allow graceful removal of framebuffer

2025-04-08 CVE-2025-21976

Field `file_table` of `struct module *module` is uninitialized

2025-04-08 CVE-2023-25585

Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

2025-04-08 CVE-2023-25588

fs/9p: fix NULL pointer dereference on mkdir

2025-04-08 CVE-2025-22070

fs/ntfs3: Fix a couple integer overflows on 32bit systems

2025-04-08 CVE-2025-22081

fs/ntfs3: Prevent integer overflow in hdr_first_de()

2025-04-08 CVE-2025-22080

ftrace: Avoid potential division by zero in function_stat_show()

2025-04-08 CVE-2025-21898

Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

2025-04-08 CVE-2025-30406

highGladinet CVE 2025-W15

Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().

2025-04-08 CVE-2025-3360

Go Snowflake Driver has race condition when checking access to Easy Logging configuration file

2025-04-08 CVE-2025-46327

gpio: aggregator: protect driver attr handlers against module unload

2025-04-08 CVE-2025-21943

HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sample_conv_regsub heap-based buffer overflow because of mishandling of the replacement of multiple short patte

2025-04-08 CVE-2025-32464

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

2025-04-08 CVE-2025-32386

Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow

2025-04-08 CVE-2025-32387

HID: appleir: Fix potential NULL dereference at raw event handle

2025-04-08 CVE-2025-21948

HID: hid-steam: Fix use-after-free when detaching device

2025-04-08 CVE-2025-21923

HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

2025-04-08 CVE-2025-21928

HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition

2025-04-08 CVE-2025-37838

HTTP.sys Denial of Service Vulnerability

2025-04-08 CVE-2025-27473

hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio

2025-04-08 CVE-2025-21931

ibmvnic: Use kernel helpers for hex dumps

2025-04-08 CVE-2025-22104

ice: fix memory leak in aRFS after reset

2025-04-08 CVE-2025-21981

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xm

2025-04-08 CVE-2025-32414

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be va

2025-04-08 CVE-2025-32415

In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (ter

2025-04-08 CVE-2024-58251

In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is

2025-04-08 CVE-2025-29087

In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.

2025-04-08 CVE-2025-32728

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

2025-04-08 CVE-2025-46394

Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

2025-04-08 CVE-2025-22872

ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().

2025-04-08 CVE-2025-22005

iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

2025-04-08 CVE-2025-21993

jfs: add check read-only before truncation in jfs_truncate_nolock()

2025-04-08 CVE-2024-58094

jfs: add check read-only before txBeginAnon() call

2025-04-08 CVE-2024-58095

jfs: fix slab-out-of-bounds read in ea_get()

2025-04-08 CVE-2025-39735

jfs: reject on-disk inodes of an unsupported type

2025-04-08 CVE-2025-37925

Kerberos Key Distribution Proxy Service Denial of Service Vulnerability

2025-04-08 CVE-2025-27479

Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisions

2025-04-08 CVE-2025-3576

ksmbd: add bounds check for create lease context

2025-04-08 CVE-2025-22042

ksmbd: add bounds check for durable handle context

2025-04-08 CVE-2025-22043

ksmbd: fix bug on trap in smb2_lock

2025-04-08 CVE-2025-21944

ksmbd: fix null pointer dereference in alloc_preauth_hash()

2025-04-08 CVE-2025-22037

ksmbd: fix out-of-bounds in parse_sec_desc()

2025-04-08 CVE-2025-21946

ksmbd: fix overflow in dacloffset bounds check

2025-04-08 CVE-2025-22039

ksmbd: fix session use-after-free in multichannel connection

2025-04-08 CVE-2025-22040

ksmbd: fix type confusion via race condition when using ipc_msg_send_request

2025-04-08 CVE-2025-21947

ksmbd: fix use-after-free in ksmbd_free_work_struct

2025-04-08 CVE-2025-21967

ksmbd: fix use-after-free in ksmbd_sessions_deregister()

2025-04-08 CVE-2025-22041

ksmbd: fix use-after-free in smb2_lock

2025-04-08 CVE-2025-21945

ksmbd: prevent connection release during oplock break notification

2025-04-08 CVE-2025-21955

ksmbd: use aead_request_free to match aead_request_alloc

2025-04-08 CVE-2025-38575