Security Warnings — Source: msrc

drm/msm: Fix pgtable prealloc error path

2025-12-09 CVE-2025-40247

mediumMicrosoft MSRC 2025-W50

drm/radeon: delete radeon_fence_process in is_signaled, no deadlock

2025-12-09 CVE-2025-68223

mediumMicrosoft MSRC 2025-W50

drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb

2025-12-09 CVE-2025-40329

highMicrosoft MSRC 2025-W50

drm/tegra: Add call to put_pid()

2025-12-09 CVE-2025-68233

mediumMicrosoft MSRC 2025-W50

drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

2025-12-09 CVE-2025-40277

highMicrosoft MSRC 2025-W50

drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test.

2025-12-09 CVE-2025-40340

highMicrosoft MSRC 2025-W50

Elasticsearch Allocation of Resources Without Limits or Throttling

2025-12-09 CVE-2025-68384

mediumMicrosoft MSRC 2025-W50

Elasticsearch Allocation of Resources Without Limits or Throttling

2025-12-09 CVE-2025-68390

mediumMicrosoft MSRC 2025-W50

Elasticsearch Improper Authentication

2025-12-09 CVE-2025-37731

mediumMicrosoft MSRC 2025-W50

Excessive resource consumption when printing error string for host certificate validation in crypto/x509

2025-12-09 CVE-2025-61729

highMicrosoft MSRC 2025-W50

exfat: fix improper check of dentry.stream.valid_size

2025-12-09 CVE-2025-40287

mediumMicrosoft MSRC 2025-W50

exfat: validate cluster allocation bits of the allocation bitmap

2025-12-09 CVE-2025-40307

mediumMicrosoft MSRC 2025-W50

Expr has Denial of Service via Unbounded Recursion in Builtin Functions

2025-12-09 CVE-2025-68156

highMicrosoft MSRC 2025-W50

ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()

2025-12-09 CVE-2025-68261

highMicrosoft MSRC 2025-W50

ext4: refresh inline data size before write operations

2025-12-09 CVE-2025-68264

mediumMicrosoft MSRC 2025-W50

f2fs: fix infinite loop in __insert_extent_tree()

2025-12-09 CVE-2025-40333

mediumMicrosoft MSRC 2025-W50

f2fs: fix to detect potential corrupted nid in free_nid_list

2025-12-09 CVE-2025-68315

highMicrosoft MSRC 2025-W50

fbcon: Set fb_display[i]->mode to NULL when the mode is released

2025-12-09 CVE-2025-40323

mediumMicrosoft MSRC 2025-W50

fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds

2025-12-09 CVE-2025-40304

mediumMicrosoft MSRC 2025-W50

fbdev: bitblit: bound-check glyph index in bit_putcs*

2025-12-09 CVE-2025-40322

highMicrosoft MSRC 2025-W50

filelock has TOCTOU race condition that allows symlink attacks during lock file creation

2025-12-09 CVE-2025-68146

mediumMicrosoft MSRC 2025-W50

firmware: stratix10-svc: fix bug in saving controller data

2025-12-09 CVE-2025-68328

mediumMicrosoft MSRC 2025-W50

fs/ntfs3: Initialize allocated memory before use

2025-12-09 CVE-2025-68365

mediumMicrosoft MSRC 2025-W50

fuse: fix livelock in synchronous file put from fuseblk workers

2025-12-09 CVE-2025-40220

mediumMicrosoft MSRC 2025-W50

futex: Don't leak robust_list pointer on exec race

2025-12-09 CVE-2025-40341

mediumMicrosoft MSRC 2025-W50

gfs2: Fix unlikely race in gdlm_put_lock

2025-12-09 CVE-2025-40242

criticalMicrosoft MSRC 2025-W50

gfs2: Prevent recursive memory reclaim

2025-12-09 CVE-2025-68356

mediumMicrosoft MSRC 2025-W50

GitHub Copilot for Jetbrains Remote Code Execution Vulnerability

2025-12-09 CVE-2025-64671

highMicrosoft MSRC 2025-W50

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

2025-12-09 CVE-2025-14087

mediumMicrosoft MSRC 2025-W50

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

2025-12-09 CVE-2025-14512

mediumMicrosoft MSRC 2025-W50

gpu: host1x: Fix race in syncpt alloc/free

2025-12-09 CVE-2025-68732

mediumMicrosoft MSRC 2025-W50

Heap buffer overflow in array_merge()

2025-12-09 CVE-2025-14178

mediumMicrosoft MSRC 2025-W50

hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()

2025-12-09 CVE-2025-40243

mediumMicrosoft MSRC 2025-W50

hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()

2025-12-09 CVE-2025-40244

criticalMicrosoft MSRC 2025-W50

HID: uclogic: Correct devm device reference for hidinput input_dev name

2025-12-09 CVE-2023-54207

highMicrosoft MSRC 2025-W50

iio: accel: bmc150: Fix irq assumption regression

2025-12-09 CVE-2025-68330

mediumMicrosoft MSRC 2025-W50

ima: Handle error code returned by ima_filter_rule_match()

2025-12-09 CVE-2025-68740

mediumMicrosoft MSRC 2025-W50

Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509

2025-12-09 CVE-2025-61727

mediumMicrosoft MSRC 2025-W50

In GnuPG through 2.4.8, armor_filter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write for crafted input. (For Extende

2025-12-09 CVE-2025-68973

highMicrosoft MSRC 2025-W50

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed materi

2025-12-09 CVE-2025-68972

mediumMicrosoft MSRC 2025-W50

In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional exec

2025-12-09 CVE-2025-48637

highMicrosoft MSRC 2025-W50

In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a vic

2025-12-09 CVE-2025-67897

mediumMicrosoft MSRC 2025-W50

Information Leak of Memory in getimagesize

2025-12-09 CVE-2025-14177

lowMicrosoft MSRC 2025-W50

Input: cros_ec_keyb - fix an invalid memory access

2025-12-09 CVE-2025-40263

mediumMicrosoft MSRC 2025-W50

Input: imx_sc_key - fix memory corruption on unload

2025-12-09 CVE-2025-40262

criticalMicrosoft MSRC 2025-W50

Input: pegasus-notetaker - fix potential out-of-bounds access

2025-12-09 CVE-2025-68217

mediumMicrosoft MSRC 2025-W50

io_uring/zctx: check chained notif contexts

2025-12-09 CVE-2025-68317

mediumMicrosoft MSRC 2025-W50

iomap: allocate s_dio_done_wq for async reads as well

2025-12-09 CVE-2025-68357

mediumMicrosoft MSRC 2025-W50

iommufd: Don't overflow during division for dirty tracking

2025-12-09 CVE-2025-40293

mediumMicrosoft MSRC 2025-W50

jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted

2025-12-09 CVE-2025-68337

mediumMicrosoft MSRC 2025-W50

jfs: Verify inode mode when loading from disk

2025-12-09 CVE-2025-40312

highMicrosoft MSRC 2025-W50

ksm: use range-walk function to jump over holes in scan_get_next_rmap_item

2025-12-09 CVE-2025-68211

mediumMicrosoft MSRC 2025-W50

ksmbd: ipc: fix use-after-free in ipc_msg_send_request

2025-12-09 CVE-2025-68263

mediumMicrosoft MSRC 2025-W50

KVM: arm64: Check the untrusted offset in FF-A memory share

2025-12-09 CVE-2025-40266

highMicrosoft MSRC 2025-W50

KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced

2025-12-09 CVE-2025-68259

mediumMicrosoft MSRC 2025-W50

landlock: Fix handling of disconnected directories

2025-12-09 CVE-2025-68736

mediumMicrosoft MSRC 2025-W50

libceph: fix potential use-after-free in have_mon_and_osd_map()

2025-12-09 CVE-2025-68285

highMicrosoft MSRC 2025-W50

libceph: prevent potential out-of-bounds writes in handle_auth_session_key()

2025-12-09 CVE-2025-68284

highMicrosoft MSRC 2025-W50

libceph: replace BUG_ON with bounds check for map->max_osd

2025-12-09 CVE-2025-68283

highMicrosoft MSRC 2025-W50

libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE

2025-12-09 CVE-2025-34468

criticalMicrosoft MSRC 2025-W50