CVE-2025-21718 – Here is the title: “Rose Linux Kernel Timer Use-After-Free Vulnerability”

The following table lists the changes that have been made to the CVE-2025-21718 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Feb. 27, 2025 Action […]

CVE-2025-21717 – Mellanox Technologies mlx5e Node ID Validation Vulnerability

The following table lists the changes that have been made to the CVE-2025-21717 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Feb. 27, 2025 Action […]

CVE-2025-21713 – IBM Power Virtual IOMMU Unset Window Null Pointer Dereference

The following table lists the changes that have been made to the CVE-2025-21713 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Feb. 27, 2025 Action […]

CVE-2025-21712 – “Linux Kernel md BitMap General Protection Fault Vulnerability”

In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime After commit ec6bb299c7c3 (“md/md-bitmap: add ‘sync_size’ into struct md_bitmap_stats”), following panic is reported: Oops: general protection fault, probably for non-canonical address RIP: 0010:bitmap_get_stats+0x2b/0xa0 Call Trace: md_seq_show+0x2d2/0x5b0 seq_read_iter+0x2b9/0x470 seq_read+0x12f/0x180 proc_reg_read+0x57/0xb0 vfs_read+0xf6/0x380 ksys_read+0x6c/0xf0 do_syscall_64+0x82/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e Root cause is that bitmap_get_stats() can […]

CVE-2025-21711 – Apache Linux Kernel Integer Overflow Vulnerability

The following table lists the changes that have been made to the CVE-2025-21711 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Feb. 27, 2025 Action […]

CVE-2025-21710 – Linux Kernel TCP Window Advertisement Vulnerability

In the Linux kernel, the following vulnerability has been resolved: tcp: correct handling of extreme memory squeeze Testing with iperf3 using the “pasta” protocol splicer has revealed a problem in the way tcp handles window advertising in extreme memory squeeze situations. Under memory pressure, a socket endpoint may temporarily advertise a zero-sized window, but this […]

CVE-2025-21709 – Linux Kernel Uprobe MM Struct Uninitialization Vulnerability

In the Linux kernel, the following vulnerability has been resolved: kernel: be more careful about dup_mmap() failures and uprobe registering If a memory allocation fails during dup_mmap(), the maple tree can be left in an unsafe state for other iterators besides the exit path. All the locks are dropped before the exit_mmap() call (in mm/mmap.c), […]

CVE-2025-21707 – Linux MPTCP Uninitialized Bitfield Vulnerability

The following table lists the changes that have been made to the CVE-2025-21707 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Feb. 27, 2025 Action […]

CVE-2025-21708 – “RTL8150 USB Endpoint Checking Vulnerability”

In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: enable basic endpoint checking Syzkaller reports [1] encountering a common issue of utilizing a wrong usb endpoint type during URB submitting stage. This, in turn, triggers a warning shown below. For now, enable simple endpoint checking (specifically, bulk and interrupt eps, testing […]