Week: 2025-W28

usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume

2025-07-08 CVE-2025-38376

usb: gadget: configfs: Fix OOB read on empty string write

2025-07-08 CVE-2025-38497

usb: gadget: u_serial: Fix race condition in TTY wakeup

2025-07-08 CVE-2025-38448

usb: net: sierra: check for no status endpoint

2025-07-08 CVE-2025-38474

usb: renesas_usbhs: Reorder clock handling and power management in probe

2025-07-08 CVE-2025-38136

usb: typec: altmodes/displayport: do not index invalid pin_assignments

2025-07-08 CVE-2025-38391

usb: typec: displayport: Fix potential deadlock

2025-07-08 CVE-2025-38404

Vim has path traversal issue with zip.vim and special crafted zip archives

2025-07-08 CVE-2025-53906

Vim has path traversial issue with tar.vim and special crafted tar files

2025-07-08 CVE-2025-53905

virtio-net: ensure the received length does not exceed allocated size

2025-07-08 CVE-2025-38375

Visual Studio Code Python Extension Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49714

Visual Studio Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49739

VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify

2025-07-08 CVE-2025-38102

vsock: Fix transport_{g2h,h2g} TOCTOU

2025-07-08 CVE-2025-38462

vsock: Fix transport_* TOCTOU

2025-07-08 CVE-2025-38461

vsock/vmci: Clear the vmci transport packet properly when initializing it

2025-07-08 CVE-2025-38403

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50077

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50079

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50080

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50081

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50082

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50083

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50085

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50086

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50087

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50092

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50093

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50094

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50096

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50098

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50099

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50100

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50101

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50104

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily explo

2025-07-08 CVE-2025-50078

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily

2025-07-08 CVE-2025-50084

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily

2025-07-08 CVE-2025-50091

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily

2025-07-08 CVE-2025-50102

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

2025-07-08 CVE-2025-53023

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.

2025-07-08 CVE-2025-50097

WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified

2025-07-08 CVE-2025-54126

wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850

2025-07-08 CVE-2025-38414

wifi: ath12k: Fix memory leak due to multiple rx_stats allocation

2025-07-08 CVE-2025-38199

wifi: ath12k: fix node corruption in ar->arvifs list

2025-07-08 CVE-2025-38290

wifi: ath6kl: remove WARN on bad firmware input

2025-07-08 CVE-2025-38406

wifi: ath9k_htc: Abort software beacon handling if disabled

2025-07-08 CVE-2025-38157

wifi: carl9170: do not ping device which has failed to load firmware

2025-07-08 CVE-2025-38420

wifi: iwlwifi: don't warn when if there is a FW error

2025-07-08 CVE-2025-38096

wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()

2025-07-08 CVE-2025-38155

wifi: mt76: mt7996: drop fragments with multicast or broadcast RA

2025-07-08 CVE-2025-38343

wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()

2025-07-08 CVE-2025-38348

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

2025-07-08 CVE-2025-38159

Win32k Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49727

Win32k Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49733

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49661

Windows AppX Deployment Service Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-48820

Windows BitLocker Security Feature Bypass Vulnerability

2025-07-08 CVE-2025-48001

Windows BitLocker Security Feature Bypass Vulnerability

2025-07-08 CVE-2025-48003

Windows BitLocker Security Feature Bypass Vulnerability

2025-07-08 CVE-2025-48800