Week: 2025-W07

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

2025-02-11 CVE-2024-57075

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Den

2025-02-11 CVE-2025-0426

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.

2025-02-11 CVE-2024-57257

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0

2025-02-11 CVE-2024-57256

An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem.

2025-02-11 CVE-2024-57254

An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and listening on an IP address and port, one can send a packet with Content-Length: 0 an

2025-02-11 CVE-2024-50609

An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running and listening on an IP address and port, one can send a packet with Content-Le

2025-02-11 CVE-2024-50608

arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

2025-02-11 CVE-2025-21785

ASoC: mediatek: Fix error handling in mt8183_da7219_max98357_dev_probe

2025-02-11 CVE-2022-49161

ath11k: Change max no of active probe SSID and BSSID to fw capability

2025-02-11 CVE-2022-49533

ath11k: Fix frames flush failure caused by deadlock

2025-02-11 CVE-2022-49123

ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt

2025-02-11 CVE-2025-21792

binfmt_flat: Fix integer overflow bug on 32 bit systems

2025-02-11 CVE-2024-58010

blk-throttle: Set BIO_THROTTLED when bio has been throttled

2025-02-11 CVE-2022-49465

Bluetooth: hci_event: Ignore multiple conn complete events

2025-02-11 CVE-2022-49138

btrfs: do proper folio cleanup when cow_file_range() failed

2025-02-11 CVE-2024-57976

btrfs: do proper folio cleanup when run_delalloc_nocow() failed

2025-02-11 CVE-2024-57975

btrfs: fix deadlock between concurrent dio writes when low on free data space

2025-02-11 CVE-2022-49547

btrfs: fix use-after-free when attempting to join an aborted transaction

2025-02-11 CVE-2025-21753

ceph: fix possible deadlock when holding Fwb to get inline_data

2025-02-11 CVE-2022-49296

clk: mediatek: Fix memory leaks on probe

2025-02-11 CVE-2022-49108

decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds

2025-02-11 CVE-2024-53427

drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle

2025-02-11 CVE-2022-49303

drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw

2025-02-11 CVE-2022-49069

drm/amd/display: Initialize denominator defaults to 1

2025-02-11 CVE-2024-57950

drm/amd/pm: fix a potential gpu_metrics_table memory leak

2025-02-11 CVE-2021-47658

drm/amdgpu/pm: fix the null pointer while the smu is disabled

2025-02-11 CVE-2022-49529

drm/dp: Fix OOB read when handling Post Cursor2 register

2025-02-11 CVE-2022-49218

drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

2025-02-11 CVE-2024-52559

drm/sprd: fix potential NULL dereference

2025-02-11 CVE-2022-49125

drm/v3d: Ensure job pointer is set to NULL after job completion

2025-02-11 CVE-2025-21697

Emacs: shell injection vulnerability in gnu emacs via custom "man" uri scheme

2025-02-11 CVE-2025-1244

eventfd double close

2025-02-11 CVE-2025-0665

criticalMicrosoft MSRC 2025-W07

f2fs: avoid infinite loop to flush node pages

2025-02-11 CVE-2022-49317

filemap: Handle sibling entries in filemap_get_read_batch()

2025-02-11 CVE-2022-49699

firmware: qcom: scm: smc: Handle missing SCM device

2025-02-11 CVE-2024-57852

fs/proc: fix softlockup in __read_vmcore (part 2)

2025-02-11 CVE-2025-21694

gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag

2025-02-11 CVE-2025-21699

GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption

2025-02-11 CVE-2025-1180

GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

2025-02-11 CVE-2025-1176

GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

2025-02-11 CVE-2025-1181

GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption

2025-02-11 CVE-2025-1182

GNU Binutils ld ldelfgen.c link_order_scan memory leak

2025-02-11 CVE-2025-1148

GNU Binutils ld libbfd.c bfd_malloc memory leak

2025-02-11 CVE-2025-1150

GNU Binutils ld libbfd.c bfd_putl64 memory corruption

2025-02-11 CVE-2025-1178

GNU Binutils ld libbfd.c bfd_putl64 memory corruption

2025-02-11 CVE-2025-1179

GNU Binutils ld xmalloc.c xstrdup memory leak

2025-02-11 CVE-2025-1149

GNU Binutils ld xmemdup.c xmemdup memory leak

2025-02-11 CVE-2025-1151

GNU Binutils nm nm.c internal_strlen buffer overflow

2025-02-11 CVE-2025-1147

GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference

2025-02-11 CVE-2025-1371

GNU elfutils eu-readelf readelf.c print_string_section buffer overflow

2025-02-11 CVE-2025-1372

GNU elfutils eu-readelf readelf.c process_symtab buffer overflow

2025-02-11 CVE-2025-1365

GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service

2025-02-11 CVE-2025-1376