CVE-2025-37825 – “Nvidia Nvmet Out-of-Bounds Access Vulnerability”
The following table lists the changes that have been made to the CVE-2025-37825 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 08, 2025 Action […]
CVE-2025-37824 – Linux Kernel Tipc NULL Pointer Dereference Vulnerability
The following table lists the changes that have been made to the CVE-2025-37824 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 08, 2025 Action […]
CVE-2025-37822 – RISC-V Linux Kernel Uprobes Fence Vulnerability
The following table lists the changes that have been made to the CVE-2025-37822 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 08, 2025 Action […]
CVE-2025-37821 – Linux Kernel Sched Eevdf Crash
In the Linux kernel, the following vulnerability has been resolved: sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash There is a code path in dequeue_entities() that can set the slice of a sched_entity to U64_MAX, which sometimes results in a crash. The offending case is when dequeue_entities() is called to dequeue a delayed […]
CVE-2025-37817 – Linux kernel Double Free in Chameleon Driver
The following table lists the changes that have been made to the CVE-2025-37817 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 08, 2025 Action […]
CVE-2025-37816 – Linux Kernel Mei VSC Buffer Overflow Vulnerability
In the Linux kernel, the following vulnerability has been resolved: mei: vsc: Fix fortify-panic caused by invalid counted_by() use gcc 15 honors the __counted_by(len) attribute on vsc_tp_packet.buf[] and the vsc-tp.c code is using this in a wrong way. len does not contain the available size in the buffer, it contains the actual packet length *without* […]
CVE-2025-37815 – “Microchip PCI1xxxx Linux Kernel IRQ Handler Registration Vulnerability”
The following table lists the changes that have been made to the CVE-2025-37815 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 08, 2025 Action […]
CVE-2025-37814 – Linux Kernel TTY Mouse Reporting Vulnerability
In the Linux kernel, the following vulnerability has been resolved: tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT This requirement was overeagerly loosened in commit 2f83e38a095f (“tty: Permit some TIOCL_SETSEL modes without CAP_SYS_ADMIN”), but as it turns out, (1) the logic I implemented there was inconsistent (apologies!), (2) TIOCL_SELMOUSEREPORT might actually be a small security […]
CVE-2025-37813 – Etron USB XHCI Invalid Pointer Dereference Vulnerability
The following table lists the changes that have been made to the CVE-2025-37813 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 08, 2025 Action […]
CVE-2025-37811 – “Qualcomm Chipidea USB Driver Null Pointer Dereference”
The following table lists the changes that have been made to the CVE-2025-37811 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 08, 2025 Action […]