CVE-2025-38492 – Linux Kernel Netfs ALL_QUEUED Race Condition Vulnerability
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix race between cache write completion and ALL_QUEUED being set When netfslib is issuing subrequests, the subrequests start processing immediately and may complete before we reach the end of the issuing function. At the end of the issuing function we set NETFS_RREQ_ALL_QUEUED to indicate […]
CVE-2025-38487 – Aspeed LPC Snoop NULL Pointer Dereference Vulnerability
The following table lists the changes that have been made to the CVE-2025-38487 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]
CVE-2025-38489 – Linux Kernel s390 BPF NULL Pointer Dereference Vulnerability
The following table lists the changes that have been made to the CVE-2025-38489 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]
CVE-2025-38488 – Linux Samba SMB Client Use-After-Free Vulnerability
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from crypt_message(), assuming all crypto operations are synchronous. However, when hardware crypto accelerators are used, this can cause use-after-free crashes: crypt_message() // Allocate the creq buffer containing the […]
CVE-2025-38482 – Linux Kernel Comedi Out-of-Bounds Bit Shift Vulnerability
In the Linux kernel, the following vulnerability has been resolved: comedi: das6402: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: /* IRQs 2,3,5,6,7, 10,11,15 are valid for “enhanced” mode */ if ((1 <options[1]) & 0x8cec) { However, `it->options[i]` is an unchecked `int` value from userspace, […]
CVE-2025-38486 – Qualcomm Soundwire QCOM SDM845 Kernel BRK Exception Handler Vulnerability
The following table lists the changes that have been made to the CVE-2025-38486 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]
CVE-2025-38485 – “Linux Kernel IIO Accel FXLS8962AF Use After Free Null Pointer Dereference Vulnerability”
The following table lists the changes that have been made to the CVE-2025-38485 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]
CVE-2025-38483 – Linux Kernel comedi das16m1 Out-of-Bounds Bit Shift Vulnerability
In the Linux kernel, the following vulnerability has been resolved: comedi: das16m1: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: /* only irqs 2, 3, 4, 5, 6, 7, 10, 11, 12, 14, and 15 are valid */ if ((1 <options[1]) & 0xdcfc) { However, […]
CVE-2025-38484 – Linux Kernel IIO Backend Out-of-Bounds Write Vulnerability
The following table lists the changes that have been made to the CVE-2025-38484 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]
CVE-2025-38481 – Linux Kernel Comedi Invalid Arg Error Vulnerability
The following table lists the changes that have been made to the CVE-2025-38481 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Jul. 28, 2025 Action […]