Tue, Jan 21 · 01:15 PM CSTCVE-2025-21663
10.0/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-tegra: Read iommu stream id from device tree Nvidia's Tegra MGBE controllers require the IOMMU "Stream ID" (SID) to be written to the MGBE_WRAP_AXI_ASID0_CTRL register. The current driver is hard coded to use MGBE0's SID for all cont
CVECVE-2025-21663
SeverityCRITICAL
TypeUPDATED
PublishedTue, Jan 21 · 01:15 PM CST
ModifiedThu, Jul 30 · 06:18 AM CDT
CVE-2022-31340
9.8/10 · Must read/watchNVDvuln
Summary
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.
CVECVE-2022-31340
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jun 02 · 02:15 PM CDT
ModifiedWed, Jul 29 · 05:22 PM CDT
CVE-2025-21673
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::hostname When shutting down the server in cifs_put_tcp_session(), cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server->hostname can't be free
CVECVE-2025-21673
SeverityCRITICAL
TypeUPDATED
PublishedFri, Jan 31 · 12:15 PM CST
ModifiedThu, Jul 30 · 06:18 AM CDT
CVE-2025-21707
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional info. Zeroing the bitmask before parsing is not enough to ens
CVECVE-2025-21707
SeverityCRITICAL
TypeUPDATED
PublishedThu, Feb 27 · 02:15 AM CST
ModifiedThu, Jul 30 · 06:20 AM CDT
CVE-2025-21748
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit systems On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.
CVECVE-2025-21748
SeverityCRITICAL
TypeUPDATED
PublishedThu, Feb 27 · 03:15 AM CST
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21796
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them If getting acl_default fails, acl_access and acl_default will be released simultaneously. However, acl_access will still retain a pointer pointing to the released posix_acl, which will trigger a W
CVECVE-2025-21796
SeverityCRITICAL
TypeUPDATED
PublishedThu, Feb 27 · 03:15 AM CST
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21805
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Add missing deinit() call A warning is triggered when repeatedly connecting and disconnecting the rnbd: list_add corruption. prev->next should be next (ffff88800b13e480), but was ffff88801ecd1338. (prev=ffff88801ecd1340). WARNING: CPU: 1 PID
CVECVE-2025-21805
SeverityCRITICAL
TypeUPDATED
PublishedThu, Feb 27 · 08:16 PM CST
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21829
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" The Call Trace is as below: " ? show_regs.cold+0x1a/0x1f ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? __warn+0x84/0xd0 ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? report_bug+0x105/0x180 ? handle
CVECVE-2025-21829
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 06 · 05:15 PM CST
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21850
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a namespace is disabled The namespace percpu counter protects pending I/O, and we can only safely diable the namespace once the counter drop to zero. Otherwise we end up with a crash when running blktests/nvme/058 (eg for loop tra
CVECVE-2025-21850
SeverityCRITICAL
TypeUPDATED
PublishedWed, Mar 12 · 10:15 AM CDT
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21927
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() doesn't check the validity of the header length. When header digests are enabled, a target might send a packet with an invalid header length (e.g. 255), causing nvme_t
CVECVE-2025-21927
SeverityCRITICAL
TypeUPDATED
PublishedTue, Apr 01 · 04:15 PM CDT
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21954
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: netmem: prevent TX of unreadable skbs Currently on stable trees we have support for netmem/devmem RX but not TX. It is not safe to forward/redirect an RX unreadable netmem packet into the device's TX path, as the device may call dma-mapping APIs on dma
CVECVE-2025-21954
SeverityCRITICAL
TypeUPDATED
PublishedTue, Apr 01 · 04:15 PM CDT
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2024-21537
8.8/10 · Worth your timeNVDvuln
Summary
Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaultLoaders function.
CVECVE-2024-21537
SeverityHIGH
TypeUPDATED
PublishedThu, Oct 31 · 05:15 AM CDT
ModifiedWed, Jul 29 · 04:17 PM CDT
CVE-2025-21735
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in nci_hci_create_pipe() The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, nci_hci_connect_gate().
CVECVE-2025-21735
SeverityHIGH
TypeUPDATED
PublishedThu, Feb 27 · 03:15 AM CST
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21828
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't flush non-uploaded STAs If STA state is pre-moved to AUTHORIZED (such as in IBSS scenarios) and insertion fails, the station is freed. In this case, the driver never knew about the station, so trying to flush it is unexpected and
CVECVE-2025-21828
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 06 · 04:15 PM CST
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21876
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit ("iommu/vt-d: Allocate DMAR fault interrupts locally") moved the call to enable_drhd_fault_handling() to a code path that does not hold any lock while traversing the drhd list. Fix it by ensuring the dmar_glo
CVECVE-2025-21876
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 27 · 03:15 PM CDT
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21945
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_lock If smb_lock->zero_len has value, ->llist of smb_lock is not delete and flock is old one. It will cause use-after-free on error handling routine.
CVECVE-2025-21945
SeverityHIGH
TypeUPDATED
PublishedTue, Apr 01 · 04:15 PM CDT
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21946
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parse_sec_desc() If osidoffset, gsidoffset and dacloffset could be greater than smb_ntsd struct size. If it is smaller, It could cause slab-out-of-bounds. And when validating sid, It need to check it included subauth array s
CVECVE-2025-21946
SeverityHIGH
TypeUPDATED
PublishedTue, Apr 01 · 04:15 PM CDT
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21955
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent connection release during oplock break notification ksmbd_work could be freed when after connection release. Increment r_count of ksmbd_conn to indicate that requests are not finished yet and to not release the connection.
CVECVE-2025-21955
SeverityHIGH
TypeUPDATED
PublishedTue, Apr 01 · 04:15 PM CDT
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21967
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_free_work_struct ->interim_entry of ksmbd_work could be deleted after oplock is freed. We don't need to manage it with linked list. The interim request could be immediately sent whenever a oplock break wait is needed.
CVECVE-2025-21967
SeverityHIGH
TypeUPDATED
PublishedTue, Apr 01 · 04:15 PM CDT
ModifiedThu, Jul 30 · 06:22 AM CDT
CVE-2025-21969
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd After the hci sync command releases l2cap_conn, the hci receive data work queue references the released l2cap_conn when sending to the upper layer. Add hci dev lock to the hci receive dat
CVECVE-2025-21969
SeverityHIGH
TypeUPDATED
PublishedTue, Apr 01 · 04:15 PM CDT
ModifiedThu, Jul 30 · 06:22 AM CDT
CVE-2025-21855
8.6/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Don't reference skb after sending to VIOS Previously, after successfully flushing the xmit buffer to VIOS, the tx_bytes stat was incremented by the length of the skb. It is invalid to access the skb memory after sending the buffer to the VIOS
CVECVE-2025-21855
SeverityHIGH
TypeUPDATED
PublishedWed, Mar 12 · 10:15 AM CDT
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21629
8.2/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets The blamed commit disabled hardware offoad of IPv6 packets with extension headers on devices that advertise NETIF_F_IPV6_CSUM, based on the definition of that feature in skbuff.h: * * - %NETIF
CVECVE-2025-21629
SeverityHIGH
TypeUPDATED
PublishedWed, Jan 15 · 01:15 PM CST
ModifiedThu, Jul 30 · 06:16 AM CDT
CVE-2025-21710
8.2/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: tcp: correct handling of extreme memory squeeze Testing with iperf3 using the "pasta" protocol splicer has revealed a problem in the way tcp handles window advertising in extreme memory squeeze situations. Under memory pressure, a socket endpoint may t
CVECVE-2025-21710
SeverityHIGH
TypeUPDATED
PublishedThu, Feb 27 · 02:15 AM CST
ModifiedThu, Jul 30 · 06:20 AM CDT
CVE-2025-21890
8.2/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: idpf: fix checksums set in idpf_rx_rsc() idpf_rx_rsc() uses skb_transport_offset(skb) while the transport header is not set yet. This triggers the following warning for CONFIG_DEBUG_NET=y builds. DEBUG_NET_WARN_ON_ONCE(!skb_transport_header_was_set(skb
CVECVE-2025-21890
SeverityHIGH
TypeUPDATED
PublishedThu, Mar 27 · 03:15 PM CDT
ModifiedThu, Jul 30 · 06:21 AM CDT
CVE-2025-21659
8.1/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: netdev: prevent accessing NAPI instances from another namespace The NAPI IDs were not fully exposed to user space prior to the netlink API, so they were never namespaced. The netlink API must ensure that at the very least NAPI instance belongs to the s
CVECVE-2025-21659
SeverityHIGH
TypeUPDATED
PublishedTue, Jan 21 · 01:15 PM CST
ModifiedThu, Jul 30 · 06:17 AM CDT
