CVE-2025-21985 – AMD Display Out-of-Bounds Array Index Vulnerability
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bound accesses [WHAT & HOW] hpo_stream_to_link_encoder_mapping has size MAX_HPO_DP2_ENCODERS(=4), but location can have size up to 6. As a result, it is necessary to check location against MAX_HPO_DP2_ENCODERS. Similiarly, disp_cfg_stream_location can be used as an array index which should be 0..5, so the […]
CVE-2025-21984 – Linux Kernel mm Swapcache Vulnerability
In the Linux kernel, the following vulnerability has been resolved: mm: fix kernel BUG when userfaultfd_move encounters swapcache userfaultfd_move() checks whether the PTE entry is present or a swap entry. – If the PTE entry is present, move_present_pte() handles folio migration by setting: src_folio->index = linear_page_index(dst_vma, dst_addr); – If the PTE entry is a swap […]
CVE-2025-21983 – Linux Kernel – NVMe WQ_MEM_RECLAIM Workqueue Vulnerability
In the Linux kernel, the following vulnerability has been resolved: mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq Currently kvfree_rcu() APIs use a system workqueue which is “system_unbound_wq” to driver RCU machinery to reclaim a memory. Recently, it has been noted that the following kernel warning can be observed: workqueue: WQ_MEM_RECLAIM nvme-wq:nvme_scan_work is flushing !WQ_MEM_RECLAIM events_unbound:kfree_rcu_work WARNING: CPU: […]
CVE-2025-21982 – “NuvoTon Npcm8xx Linux Kernel Null Pointer Dereference”
The following table lists the changes that have been made to the CVE-2025-21982 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Apr. 01, 2025 Action […]
CVE-2025-21981 – “Ice: Memory Leak in aRFS after Reset”
In the Linux kernel, the following vulnerability has been resolved: ice: fix memory leak in aRFS after reset Fix aRFS (accelerated Receive Flow Steering) structures memory leak by adding a checker to verify if aRFS memory is already allocated while configuring VSI. aRFS objects are allocated in two cases: – as part of VSI initialization […]
CVE-2025-21980 – Linux Kernel Sched NULL Pointer Dereference Vulnerability
In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. If kzalloc in gred_init returns a NULL pointer, the code follows the error handling path, invoking gred_destroy. This, in turn, calls gred_offload, where memset could receive a NULL pointer as input, potentially leading to […]
CVE-2025-21979 – “Linux Kernel WiFi cfg80211 Use-After-Free Vulnerability”
The following table lists the changes that have been made to the CVE-2025-21979 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Apr. 01, 2025 Action […]
CVE-2025-21976 – Linux Kernel Hyper-V framebuffer Unbind Information Leak
The following table lists the changes that have been made to the CVE-2025-21976 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Apr. 01, 2025 Action […]
CVE-2025-21975 – “mlx5 Linux Kernel Null Pointer Dereference Vulnerability”
The following table lists the changes that have been made to the CVE-2025-21975 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Apr. 01, 2025 Action […]
CVE-2025-21974 – ASUS PRIME Z690-P D4 bnxt_en Use-After-Free Vulnerability
The following table lists the changes that have been made to the CVE-2025-21974 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Apr. 01, 2025 Action […]