CVE-2025-37988 – Apache Linux Kernel Mount Namespace Locking races

In the Linux kernel, the following vulnerability has been resolved: fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() Normally do_lock_mount(path, _) is locking a mountpoint pinned by *path and at the time when matching unlock_mount() unlocks that location it is still pinned by the same thing. Unfortunately, for ‘beneath’ case it’s no longer […]

CVE-2025-37987 – Linux PDS Core AdminQ Overflow/Stuck Condition Vulnerability

In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent possible adminq overflow/stuck condition The pds_core’s adminq is protected by the adminq_lock, which prevents more than 1 command to be posted onto it at any one time. This makes it so the client drivers cannot simultaneously post adminq commands. However, the completions happen […]

CVE-2025-37985 – Linux Kernel USB Wdm Wwan Buffer Overflow

The following table lists the changes that have been made to the CVE-2025-37985 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 20, 2025 Action […]

CVE-2025-37986 – “USB Type-C: Invalid Pointer Vulnerability”

The following table lists the changes that have been made to the CVE-2025-37986 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 20, 2025 Action […]

CVE-2025-37984 – Linux Kernel ECDsa Integer Overflow Vulnerability

In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa – Harden against integer overflows in DIV_ROUND_UP() Herbert notes that DIV_ROUND_UP() may overflow unnecessarily if an ecdsa implementation’s ->key_size() callback returns an unusually large value. Herbert instead suggests (for a division by 8): X / 8 + !!(X & 7) Based on this […]

CVE-2025-22157 – Atlassian Jira Privilege Escalation Vulnerability

This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Service Management Data Center and Server This PrivEsc (Privilege Escalation) vulnerability, with a CVSS Score of 7.2, allows an attacker to perform actions as a […]

CVE-2025-44084 – D-Link DI-8100 Command Injection Vulnerability

The following table lists the changes that have been made to the CVE-2025-44084 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 20, 2025 Action […]

CVE-2025-37982 – “Qualcomm Atheros Linux Kernel Memory Leak”

The following table lists the changes that have been made to the CVE-2025-37982 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 20, 2025 Action […]

CVE-2025-37975 – RISC-V Module Out-of-Bounds Relocation Access

The following table lists the changes that have been made to the CVE-2025-37975 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 May. 20, 2025 Action […]

CVE-2025-37976 – “Qualcomm ath12k WiFi Destination Ring Entry Fetch Vulnerability”

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process [ Upstream commit 63fdc4509bcf483e79548de6bc08bf3c8e504bb3 ] Currently, ath12k_dp_mon_srng_process uses ath12k_hal_srng_src_get_next_entry to fetch the next entry from the destination ring. This is incorrect because ath12k_hal_srng_src_get_next_entry is intended for source rings, not destination rings. This leads to invalid entry fetches, […]