CVE-2025-38492 – Linux Kernel Netfs ALL_QUEUED Race Condition Vulnerability

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix race between cache write completion and ALL_QUEUED being set When netfslib is issuing subrequests, the subrequests start processing immediately and may complete before we reach the end of the issuing function. At the end of the issuing function we set NETFS_RREQ_ALL_QUEUED to indicate […]

CVE-2025-38487 – Aspeed LPC Snoop NULL Pointer Dereference Vulnerability

The following table lists the changes that have been made to the CVE-2025-38487 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]

CVE-2025-38489 – Linux Kernel s390 BPF NULL Pointer Dereference Vulnerability

The following table lists the changes that have been made to the CVE-2025-38489 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]

CVE-2025-38488 – Linux Samba SMB Client Use-After-Free Vulnerability

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from crypt_message(), assuming all crypto operations are synchronous. However, when hardware crypto accelerators are used, this can cause use-after-free crashes: crypt_message() // Allocate the creq buffer containing the […]

CVE-2025-38482 – Linux Kernel Comedi Out-of-Bounds Bit Shift Vulnerability

In the Linux kernel, the following vulnerability has been resolved: comedi: das6402: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: /* IRQs 2,3,5,6,7, 10,11,15 are valid for “enhanced” mode */ if ((1 <options[1]) & 0x8cec) { However, `it->options[i]` is an unchecked `int` value from userspace, […]

CVE-2025-38486 – Qualcomm Soundwire QCOM SDM845 Kernel BRK Exception Handler Vulnerability

The following table lists the changes that have been made to the CVE-2025-38486 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]

CVE-2025-38485 – “Linux Kernel IIO Accel FXLS8962AF Use After Free Null Pointer Dereference Vulnerability”

The following table lists the changes that have been made to the CVE-2025-38485 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]

CVE-2025-38484 – Linux Kernel IIO Backend Out-of-Bounds Write Vulnerability

The following table lists the changes that have been made to the CVE-2025-38484 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]

CVE-2025-38481 – Linux Kernel Comedi Invalid Arg Error Vulnerability

The following table lists the changes that have been made to the CVE-2025-38481 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]