Week: 2025-W28

mtd: spinand: fix memory leak of ECC engine conf

2025-07-08 CVE-2025-38384

mtk-sd: Prevent memory corruption from DMA map failure

2025-07-08 CVE-2025-38401

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules,

2025-07-08 CVE-2025-49809

nbd: fix uaf in nbd_genl_connect() error path

2025-07-08 CVE-2025-38443

net_sched: ets: fix a race in ets_qdisc_change()

2025-07-08 CVE-2025-38107

net_sched: red: fix a race in __red_change()

2025-07-08 CVE-2025-38108

net_sched: sch_sfq: fix a potential crash on gso_skb handling

2025-07-08 CVE-2025-38115

net_sched: sch_sfq: reject invalid perturb period

2025-07-08 CVE-2025-38193

net: atm: add lec_mutex

2025-07-08 CVE-2025-38323

net: atm: fix /proc/net/atm/lec handling

2025-07-08 CVE-2025-38180

net: clear the dst when changing skb protocol

2025-07-08 CVE-2025-38192

net: dsa: b53: do not enable EEE on bcm63xx

2025-07-08 CVE-2025-38272

net: ethernet: cortina: Use TOE/TSO on all TCP

2025-07-08 CVE-2025-38331

net: Fix TOCTOU issue in sk_is_readable()

2025-07-08 CVE-2025-38112

net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()

2025-07-08 CVE-2025-38183

net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices

2025-07-08 CVE-2025-38422

net: openvswitch: Fix the dead loop of MPLS parse

2025-07-08 CVE-2025-38146

net: phy: clear phydev->devlink when the link is deleted

2025-07-08 CVE-2025-38149

net: phy: mscc: Fix memory leak when using one step timestamping

2025-07-08 CVE-2025-38148

net: stmmac: make sure that ptp_rate is not 0 before configuring EST

2025-07-08 CVE-2025-38125

net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping

2025-07-08 CVE-2025-38126

net: usb: aqc111: fix error handling of usbnet read calls

2025-07-08 CVE-2025-38153

net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect

2025-07-08 CVE-2025-38385

net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime

2025-07-08 CVE-2025-38470

net: wwan: t7xx: Fix napi rx poll issue

2025-07-08 CVE-2025-38123

Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow

2025-07-08 CVE-2025-40913

net/mdiobus: Fix potential out-of-bounds clause 45 read/write access

2025-07-08 CVE-2025-38110

net/mdiobus: Fix potential out-of-bounds read/write access

2025-07-08 CVE-2025-38111

net/mlx5: Fix ECVF vports unload on shutdown flow

2025-07-08 CVE-2025-38109

net/sched: Abort __tc_modify_qdisc if parent class does not exist

2025-07-08 CVE-2025-38457

net/sched: Always pass notifications when child class becomes empty

2025-07-08 CVE-2025-38350

net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree

2025-07-08 CVE-2025-38468

net/sched: sch_qfq: Fix race condition on qfq_aggregate

2025-07-08 CVE-2025-38477

netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()

2025-07-08 CVE-2025-38441

netfilter: nf_conntrack: fix crash due to removal of uninitialised entry

2025-07-08 CVE-2025-38472

netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX

2025-07-08 CVE-2025-38201

netfilter: nft_set_pipapo: prevent overflow in lookup table allocation

2025-07-08 CVE-2025-38162

netfs: Fix double put of request

2025-07-08 CVE-2025-38411

netlink: Fix wraparounds of sk->sk_rmem_alloc.

2025-07-08 CVE-2025-38465

NFC: nci: uart: Set tty->disc_data only in success path

2025-07-08 CVE-2025-38416

nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.

2025-07-08 CVE-2025-38400

NFSD: fix race between nfsd registration and exports_proc

2025-07-08 CVE-2025-38232

nfsd: Initialize ssc before laundromat_work to prevent NULL dereference

2025-07-08 CVE-2025-38231

nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request

2025-07-08 CVE-2025-38430

NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN

2025-07-08 CVE-2025-38393

NTFS Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49678

Null byte termination in hostnames

2025-07-08 CVE-2025-1220

NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix

2025-07-08 CVE-2025-6491

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated per

2025-07-08 CVE-2025-23266

criticalMicrosoft MSRC 2025-W28

nvme-tcp: sanitize request list handling

2025-07-08 CVE-2025-38264

octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback

2025-07-08 CVE-2025-38278

Office Developer Platform Security Feature Bypass Vulnerability

2025-07-08 CVE-2025-49756

on-headers vulnerable to http response header manipulation

2025-07-08 CVE-2025-7339

Out-of-bounds Read in Wireshark

2025-07-08 CVE-2023-6174

page_pool: Fix use-after-free in page_pool_recycle_in_ring

2025-07-08 CVE-2025-38129

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.locatio

2025-07-08 CVE-2025-51480

perf: Fix sample vs do_exit()

2025-07-08 CVE-2025-38424

perf: Revert to requiring CAP_SYS_ADMIN for uprobes

2025-07-08 CVE-2025-38466

pgsql extension does not check for errors during escaping

2025-07-08 CVE-2025-1735