Security Warnings — Week: 2025-W28

phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug

2025-07-08 CVE-2025-38275

mediumMicrosoft MSRC 2025-W28

ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a ze

2025-07-08 CVE-2025-48964

mediumMicrosoft MSRC 2025-W28

platform/x86: dell_rbu: Fix list usage

2025-07-08 CVE-2025-38197

highMicrosoft MSRC 2025-W28

platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks

2025-07-08 CVE-2025-38412

mediumMicrosoft MSRC 2025-W28

Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write

2025-07-08 CVE-2025-7519

mediumMicrosoft MSRC 2025-W28

posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

2025-07-08 CVE-2025-38352

highMicrosoft MSRC 2025-W28

ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()

2025-07-08 CVE-2025-38305

mediumMicrosoft MSRC 2025-W28

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedl

2025-07-08 CVE-2025-45768

highMicrosoft MSRC 2025-W28

raid10: cleanup memleak at raid10_make_request

2025-07-08 CVE-2025-38444

mediumMicrosoft MSRC 2025-W28

RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction

2025-07-08 CVE-2025-38211

mediumMicrosoft MSRC 2025-W28

RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction

2025-07-08 CVE-2025-38161

mediumMicrosoft MSRC 2025-W28

RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert

2025-07-08 CVE-2025-38387

mediumMicrosoft MSRC 2025-W28

Redis allows out of bounds writes in hyperloglog commands leading to RCE

2025-07-08 CVE-2025-32023

highMicrosoft MSRC 2025-W28

Redis DoS Vulnerability due to bad connection error handling

2025-07-08 CVE-2025-48367

highMicrosoft MSRC 2025-W28

regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods

2025-07-08 CVE-2025-38395

highMicrosoft MSRC 2025-W28

Rejected reason: Maintainers have included reasons at https://gitlab.gnome.org/GNOME/libsoup/-/issues/465

2025-07-08 CVE-2025-8197

mediumMicrosoft MSRC 2025-W28

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

2025-07-08 CVE-2025-38213

mediumMicrosoft MSRC 2025-W28

Remote Desktop Client Remote Code Execution Vulnerability

2025-07-08 CVE-2025-48817

highMicrosoft MSRC 2025-W28

Remote Desktop Licensing Service Security Feature Bypass Vulnerability

2025-07-08 CVE-2025-48814

highMicrosoft MSRC 2025-W28

Remote Desktop Spoofing Vulnerability

2025-07-08 CVE-2025-33054

highMicrosoft MSRC 2025-W28

remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()

2025-07-08 CVE-2025-38419

mediumMicrosoft MSRC 2025-W28

remoteproc: core: Release rproc->clean_table after rproc_attach() fails

2025-07-08 CVE-2025-38418

mediumMicrosoft MSRC 2025-W28

riscv: save the SR_SUM status over switches

2025-07-08 CVE-2025-38261

mediumMicrosoft MSRC 2025-W28

rose: fix dangling neighbour pointers in rose_rt_device_down()

2025-07-08 CVE-2025-38377

highMicrosoft MSRC 2025-W28

rpl: Fix use-after-free in rpl_do_srh_inline().

2025-07-08 CVE-2025-38476

highMicrosoft MSRC 2025-W28

s390/mm: Fix in_atomic() handling in do_secure_storage_access()

2025-07-08 CVE-2025-38359

mediumMicrosoft MSRC 2025-W28

s390/pkey: Prevent overflow in size calculation for memdup_user()

2025-07-08 CVE-2025-38257

mediumMicrosoft MSRC 2025-W28

sch_hfsc: make hfsc_qlen_notify() idempotent

2025-07-08 CVE-2025-38177

mediumMicrosoft MSRC 2025-W28

sched/rt: Fix race in push_rt_task

2025-07-08 CVE-2025-38234

mediumMicrosoft MSRC 2025-W28

scsi: core: ufs: Fix a hang in the error handler

2025-07-08 CVE-2025-38119

mediumMicrosoft MSRC 2025-W28

scsi: lpfc: Use memcpy() for BIOS version

2025-07-08 CVE-2025-38332

highMicrosoft MSRC 2025-W28

scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()

2025-07-08 CVE-2025-38399

highMicrosoft MSRC 2025-W28

seg6: Fix validation of nexthop addresses

2025-07-08 CVE-2025-38310

highMicrosoft MSRC 2025-W28

serial: Fix potential null-ptr-deref in mlb_usio_probe()

2025-07-08 CVE-2025-38135

mediumMicrosoft MSRC 2025-W28

serial: jsm: fix NPE during jsm_uart_port_init

2025-07-08 CVE-2025-38265

mediumMicrosoft MSRC 2025-W28

smb: client: add NULL check in automount_fullpath

2025-07-08 CVE-2025-38208

mediumMicrosoft MSRC 2025-W28

smb: client: fix potential deadlock when reconnecting channels

2025-07-08 CVE-2025-38244

highMicrosoft MSRC 2025-W28

smb: client: fix use-after-free in crypt_message when using async crypto

2025-07-08 CVE-2025-38488

highMicrosoft MSRC 2025-W28

smb: client: fix warning when reconnecting channel

2025-07-08 CVE-2025-38379

highMicrosoft MSRC 2025-W28

smb: Log an error when close_all_cached_dirs fails

2025-07-08 CVE-2025-38321

mediumMicrosoft MSRC 2025-W28

soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()

2025-07-08 CVE-2025-38145

mediumMicrosoft MSRC 2025-W28

soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled

2025-07-08 CVE-2025-38487

mediumMicrosoft MSRC 2025-W28

software node: Correct a OOB check in software_node_get_reference_args()

2025-07-08 CVE-2025-38342

mediumMicrosoft MSRC 2025-W28

SQLite integer overflow in key info allocation may lead to information disclosure.

2025-07-08 CVE-2025-7458

criticalMicrosoft MSRC 2025-W28

Squashfs: check return result of sb_min_blocksize

2025-07-08 CVE-2025-38415

highMicrosoft MSRC 2025-W28

Tarfile infinite loop during parsing with negative member offset

2025-07-08 CVE-2025-8194

highMicrosoft MSRC 2025-W28

tcp: Correct signedness in skb remaining space calculation

2025-07-08 CVE-2025-38463

highMicrosoft MSRC 2025-W28

The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-3288

2025-07-08 CVE-2023-53158

mediumMicrosoft MSRC 2025-W28

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

2025-07-08 CVE-2023-53159

mediumMicrosoft MSRC 2025-W28

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fields in untrusted inpu

2025-07-08 CVE-2025-53605

mediumMicrosoft MSRC 2025-W28

The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.

2025-07-08 CVE-2024-58266

lowMicrosoft MSRC 2025-W28

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with argument

2025-07-08 CVE-2025-54314

lowMicrosoft MSRC 2025-W28

thunderbolt: Do not double dequeue a configuration request

2025-07-08 CVE-2025-38174

mediumMicrosoft MSRC 2025-W28

tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer

2025-07-08 CVE-2025-38184

highMicrosoft MSRC 2025-W28

tipc: Fix use-after-free in tipc_conn_close().

2025-07-08 CVE-2025-38464

highMicrosoft MSRC 2025-W28

tls: always refresh the queue when reading sock

2025-07-08 CVE-2025-38471

highMicrosoft MSRC 2025-W28

tracing/osnoise: Fix crash in timerlat_dump_stack()

2025-07-08 CVE-2025-38493

highMicrosoft MSRC 2025-W28

tty: serial: uartlite: register uart driver in init

2025-07-08 CVE-2025-38262

mediumMicrosoft MSRC 2025-W28

ublk: santizize the arguments from userspace when adding a device

2025-07-08 CVE-2025-38182

highMicrosoft MSRC 2025-W28

Unexpected command execution in untrusted VCS repositories in cmd/go

2025-07-08 CVE-2025-4674

highMicrosoft MSRC 2025-W28