Vendor: microsoft

drm/gma500: Fix null dereference in hdmi teardown

2025-10-14 CVE-2025-40011

e1000e: fix heap overflow in e1000_set_eeprom

2025-10-14 CVE-2025-39898

criticalMicrosoft MSRC 2025-W42

Elasticsearch Insertion of sensitive information in log file

2025-10-14 CVE-2025-37727

f2fs: fix to avoid overflow while left shift operation

2025-10-14 CVE-2025-40077

f2fs: fix to do sanity check on node footer for non inode dnode

2025-10-14 CVE-2025-40025

fbcon: fix integer overflow in fbcon_do_set_font

2025-10-14 CVE-2025-39967

criticalMicrosoft MSRC 2025-W42

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attac

2025-10-14 CVE-2025-61100

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows att

2025-10-14 CVE-2025-61102

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_lan_adj_sid function at ospf_ext.c. This vulnerability allows

2025-10-14 CVE-2025-61103

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows at

2025-10-14 CVE-2025-61107

fs: udf: fix OOB read in lengthAllocDescs handling

2025-10-14 CVE-2025-40044

futex: Prevent use-after-free during requeue-PI

2025-10-14 CVE-2025-39977

GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow

2025-10-14 CVE-2025-11495

GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

2025-10-14 CVE-2025-11412

GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

2025-10-14 CVE-2025-11413

GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

2025-10-14 CVE-2025-11414

GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds

2025-10-14 CVE-2025-11494

GNU Binutils prdbg.c tg_tag_type return value

2025-10-14 CVE-2025-11839

hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()

2025-10-14 CVE-2025-40088

hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()

2025-10-14 CVE-2025-40082

i40e: add max boundary check for VF filters

2025-10-14 CVE-2025-39968

criticalMicrosoft MSRC 2025-W42

i40e: add validation for ring_len param

2025-10-14 CVE-2025-39973

criticalMicrosoft MSRC 2025-W42

i40e: fix idx validation in config queues msg

2025-10-14 CVE-2025-39971

criticalMicrosoft MSRC 2025-W42

i40e: fix idx validation in i40e_validate_queue_map

2025-10-14 CVE-2025-39972

criticalMicrosoft MSRC 2025-W42

i40e: fix input validation logic for action_meta

2025-10-14 CVE-2025-39970

criticalMicrosoft MSRC 2025-W42

i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path

2025-10-14 CVE-2025-39911

i40e: fix validation of VF state in get resources

2025-10-14 CVE-2025-39969

i40e: remove read access to debugfs files

2025-10-14 CVE-2025-39901

Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak

2025-10-14 CVE-2025-40035

iommu/amd/pgtbl: Fix possible race while increase page table level

2025-10-14 CVE-2025-39961

iommu/s390: Make attach succeed when the device was surprise removed

2025-10-14 CVE-2025-39958

ipv4: start using dst_dev_rcu()

2025-10-14 CVE-2025-40074

ipvs: Defer ip_vs_ftp unregister during netns cleanup

2025-10-14 CVE-2025-40018

ixgbevf: fix mailbox API compatibility by negotiating supported features

2025-10-14 CVE-2025-40104

ksmbd: Fix race condition in RPC handle list access

2025-10-14 CVE-2025-40039

ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

2025-10-14 CVE-2025-39943

criticalMicrosoft MSRC 2025-W42

ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

2025-10-14 CVE-2025-39942

ksmbd: transport_ipc: validate payload size before reading handle

2025-10-14 CVE-2025-40084

KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid

2025-10-14 CVE-2025-40038

KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

2025-10-14 CVE-2025-40026

Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion

2025-10-14 CVE-2025-12105

Lua library commands may lead to integer overflow and potential RCE

2025-10-14 CVE-2025-46817

LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact when the application processes untrusted LZ4 frames.

2025-10-14 CVE-2025-62813

media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove

2025-10-14 CVE-2025-39996

criticalMicrosoft MSRC 2025-W42

media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe

2025-10-14 CVE-2025-39995

media: rc: fix races with imon_disconnect()

2025-10-14 CVE-2025-39993

media: tuner: xc5000: Fix use-after-free in xc5000_release

2025-10-14 CVE-2025-39994

criticalMicrosoft MSRC 2025-W42

media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID

2025-10-14 CVE-2025-40016

Microsoft Windows Improper Access Control Vulnerability

2025-10-14 CVE-2025-59230

highMicrosoft CVE 2025-W42

Microsoft Windows Untrusted Pointer Dereference Vulnerability

2025-10-14 CVE-2025-24990

highMicrosoft CVE 2025-W42

misc: fastrpc: fix possible map leak in fastrpc_put_args

2025-10-14 CVE-2025-40036

mm: /proc/pid/smaps_rollup: fix no vma's null-deref

2025-10-14 CVE-2022-50502

mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()

2025-10-14 CVE-2025-39909

mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()

2025-10-14 CVE-2025-39916

mm/ksm: fix flag-dropping behavior in ksm_madvise

2025-10-14 CVE-2025-40040

mm/slub: avoid accessing metadata when pointer is invalid in object_err()

2025-10-14 CVE-2025-39902

mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()

2025-10-14 CVE-2025-39910

criticalMicrosoft MSRC 2025-W42

mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2()

2025-10-14 CVE-2022-50464