CVE-2025-37881 – Aspeed USB Gadget NULL Pointer Dereference
The following table lists the changes that have been made to the CVE-2025-37881 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 09, 2025 Action […]
CVE-2025-37879 – “Linux 9p Client Signed Integer Vulnerability”
The following table lists the changes that have been made to the CVE-2025-37879 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 09, 2025 Action […]
CVE-2025-37877 – Linux Kernel IOMMU DMA Cleanup Vulnerability
In the Linux kernel, the following vulnerability has been resolved: iommu: Clear iommu-dma ops on cleanup If iommu_device_register() encounters an error, it can end up tearing down already-configured groups and default domains, however this currently still leaves devices hooked up to iommu-dma (and even historically the behaviour in this area was at best inconsistent across […]
CVE-2025-37876 – Linux NetFS NULL Pointer Dereference Vulnerability
In the Linux kernel, the following vulnerability has been resolved: netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS When testing a special config: CONFIG_NETFS_SUPPORTS=y CONFIG_PROC_FS=n The system crashes with something like: [ 3.766197] ————[ cut here ]———— [ 3.766484] kernel BUG at mm/mempool.c:560! [ 3.766789] Oops: invalid opcode: 0000 [#1] SMP NOPTI [ 3.767123] CPU: 0 UID: […]
CVE-2025-37875 – “Ionic Gigabit Controller (igc) PTM Trigger Logic Vulnerability”
In the Linux kernel, the following vulnerability has been resolved: igc: fix PTM cycle trigger logic Writing to clear the PTM status ‘valid’ bit while the PTM cycle is triggered results in unreliable PTM operation. To fix this, clear the PTM ‘trigger’ and status after each PTM transaction. The issue can be reproduced with the […]
CVE-2025-37874 – “Netgear BE Wireless Driver Memory Leak”
In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix memory leak in ngbe_probe() error path When ngbe_sw_init() is called, memory is allocated for wx->rss_key in wx_init_rss_key(). However, in ngbe_probe() function, the subsequent error paths after ngbe_sw_init() don’t free the rss_key. Fix that by freeing it in error path along with wx->mac_table. […]
CVE-2025-37873 – “bnxt Ethernet Driver DMA Mapping Error Crash Vulnerability”
The following table lists the changes that have been made to the CVE-2025-37873 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 09, 2025 Action […]
CVE-2025-37871 – Linux Kernel NFSd Deadlock Vulnerability
In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sc_count directly if fail to queue dl_recall A deadlock warning occurred when invoking nfs4_put_stid following a failed dl_recall queue operation: T1 T2 nfs4_laundromat nfs4_get_client_reaplist nfs4_anylock_blockers __break_lease spin_lock // ctx->flc_lock spin_lock // clp->cl_lock nfs4_lockowner_has_blockers locks_owner_has_blockers spin_lock // flctx->flc_lock nfsd_break_deleg_cb nfsd_break_one_deleg nfs4_put_stid refcount_dec_and_lock spin_lock // […]
CVE-2025-37872 – NetXtreme Gigabit Ethernet (TXGBE) Memory Leak Vulnerability
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix memory leak in txgbe_probe() error path When txgbe_sw_init() is called, memory is allocated for wx->rss_key in wx_init_rss_key(). However, in txgbe_probe() function, the subsequent error paths after txgbe_sw_init() don’t free the rss_key. Fix that by freeing it in error path along with wx->mac_table. […]
CVE-2025-2253 – IMITHEMES Listing Plugin Privilege Escalation Vulnerability
The following table lists the changes that have been made to the CVE-2025-2253 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 09, 2025 Action […]