Week: 2025-W11

Microsoft Word Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24078

Microsoft Word Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24079

mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath()

2025-03-11 CVE-2023-52939

mm/khugepaged: fix ->anon_vma race

2025-03-11 CVE-2023-52935

mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()

2025-03-11 CVE-2025-21861

net: allow small head cache usage with large MAX_SKB_FRAGS values

2025-03-11 CVE-2025-21868

net: better track kernel sockets lifetime

2025-03-11 CVE-2025-21884

net/sched: cls_api: fix error handling causing NULL dereference

2025-03-11 CVE-2025-21857

netfilter: allow exp not to be removed in nf_ct_find_expectation

2025-03-11 CVE-2023-52927

Network restriction bypass via race condition during namespace termination

2025-03-11 CVE-2024-7598

nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()

2025-03-11 CVE-2025-21848

NTLM Hash Disclosure Spoofing Vulnerability

2025-03-11 CVE-2025-24054

NTLM Hash Disclosure Spoofing Vulnerability

2025-03-11 CVE-2025-24996

Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pax_extension at rchive_read_support_format_tar.c:1844:8.

2025-03-11 CVE-2024-48615

numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never restored. This is related to xsltNumbe

2025-03-11 CVE-2025-24855

ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up

2025-03-11 CVE-2025-21887

PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1

2025-03-11 CVE-2025-21831

Possible SSRF and Credential Leakage via Absolute URL in axios Requests

2025-03-11 CVE-2025-27152

Potential iSCSI R2T PDU Vulnerability

2025-03-11 CVE-2025-2295

powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC

2025-03-11 CVE-2025-21866

PyTorch torch.lstm_cell memory corruption

2025-03-11 CVE-2025-3001

PyTorch torch.mkldnn_max_pool2d denial of service

2025-03-11 CVE-2025-2953

PyTorch torch.nn.utils.rnn.pad_packed_sequence memory corruption

2025-03-11 CVE-2025-2998

RabbitMQ has XSS Vulnerability in an Error Message in Management UI

2025-03-11 CVE-2025-30219

RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers

2025-03-11 CVE-2025-21885

RDMA/mlx5: Fix a WARN during dereg_mr for DM type

2025-03-11 CVE-2025-21888

RDMA/mlx5: Fix the recovery flow of the UMR QP

2025-03-11 CVE-2025-21892

Remote Desktop Client Remote Code Execution Vulnerability

2025-03-11 CVE-2025-26645

rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read

2025-03-11 CVE-2024-58069

rxrpc: Fix handling of received connection abort

2025-03-11 CVE-2024-58053

s390/ism: add release function for struct device

2025-03-11 CVE-2025-21856

smb: client: Add check for next_buffer in receive_encrypted_standard()

2025-03-11 CVE-2025-21844

sockmap, vsock: For connectible sockets allow only connected

2025-03-11 CVE-2025-21854

squashfs: harden sanity check in squashfs_read_xattr_id_table

2025-03-11 CVE-2023-52979

Stream HTTP wrapper header check might omit basic auth header

2025-03-11 CVE-2025-1736

Stream HTTP wrapper truncates redirect location to 1024 bytes

2025-03-11 CVE-2025-1861

criticalMicrosoft MSRC 2025-W11

Streams HTTP wrapper does not fail for headers with invalid name and no colon

2025-03-11 CVE-2025-1734

tcp: drop secpath at the same time as we currently drop dst

2025-03-11 CVE-2025-21864

team: prevent adding a device which is already a team device lower

2025-03-11 CVE-2024-58071

thermal: core: call put_device() only after device_register() fails

2025-03-11 CVE-2023-53012

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.

2025-03-11 CVE-2024-9042

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume f

2025-03-11 CVE-2025-1767

uprobes: Reject the shared zeropage in uprobe_write_opcode()

2025-03-11 CVE-2025-21881

usb: gadget: core: flush gadget workqueue after device removal

2025-03-11 CVE-2025-21838

USB: gadget: f_midi: f_midi_complete to call queue_work

2025-03-11 CVE-2025-21859

usb: gadget: f_tcm: Don't free command immediately

2025-03-11 CVE-2024-58055

Vim vulnerable to potential data loss with zip.vim and special crafted zip files

2025-03-11 CVE-2025-29768

Visual Studio Code Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-26631

Visual Studio Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24998

Visual Studio Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-25003

wifi: rtlwifi: fix memory leaks and invalid access at probe error path

2025-03-11 CVE-2024-58063

WinDbg Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24043

Windows Common Log File System Driver Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24059

Windows Core Messaging Elevation of Privileges Vulnerability

2025-03-11 CVE-2025-26634

Windows Domain Name Service Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24064

Windows exFAT File System Remote Code Execution Vulnerability

2025-03-11 CVE-2025-21180

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

2025-03-11 CVE-2025-24985

Windows Hyper-V Elevation of Privilege Vulnerability

2025-03-11 CVE-2025-24048