CVE-2025-38537 – Linux Kernel: Net PHY LED Registration Vulnerability

In the Linux kernel, the following vulnerability has been resolved: net: phy: Don’t register LEDs for genphy If a PHY has no driver, the genphy driver is probed/removed directly in phy_attach/detach. If the PHY’s ofnode has an “leds” subnode, then the LEDs will be (un)registered when probing/removing the genphy driver. This could occur if the […]

CVE-2025-38535 – Linux Kernel Tegra XUSB Regulator Unbalanced Disable Vulnerability

In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode When transitioning from USB_ROLE_DEVICE to USB_ROLE_NONE, the code assumed that the regulator should be disabled. However, if the regulator is marked as always-on, regulator_is_enabled() continues to return true, leading to an incorrect attempt to […]

CVE-2025-38536 – “Airoha Linux Kernel Use-After-Free Vulnerability”

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix potential use-after-free in airoha_npu_get() np->name was being used after calling of_node_put(np), which releases the node and can lead to a use-after-free bug. Previously, of_node_put(np) was called unconditionally after of_find_device_by_node(np), which could result in a use-after-free if pdev is NULL. This patch moves […]

CVE-2025-38534 – Ceph Linux Kernel NETFS Request Offload Collection Vulnerability

The following table lists the changes that have been made to the CVE-2025-38534 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Aug. 16, 2025 Action […]

CVE-2025-38533 – Linux Kernel DMA Use-After-Free Vulnerability in wx_rx_buffer

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix the using of Rx buffer DMA The wx_rx_buffer structure contained two DMA address fields: ‘dma’ and ‘page_dma’. However, only ‘page_dma’ was actually initialized and used to program the Rx descriptor. But ‘dma’ was uninitialized and used in some paths. This could lead […]

CVE-2025-38532 – Linux libwx Rx Ring Descriptor Reset Vulnerability

The following table lists the changes that have been made to the CVE-2025-38532 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Aug. 16, 2025 Action […]

Hackers Mimic IT Teams to Exploit Microsoft Teams Request to Gain System Remote Access

Hackers Mimic IT Teams to Exploit Microsoft Teams Request to Gain System Remote Access A sophisticated social engineering campaign by the EncryptHub threat group that combines impersonation tactics with technical exploitation to compromise corporate networks. The Russian-linked cybercri … Read more Published Date: Aug 16, 2025 (1 hour, 38 minutes ago) Vulnerabilities has been mentioned in this […]

CVE-2025-9092 – Bouncy Castle for Java – BC-FJA Uncontrolled Resource Consumption Denial of Service

The following table lists the changes that have been made to the CVE-2025-9092 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 91579145-5d7b-4cc5-b925-a0262ff19630 Aug. 16, 2025 Action […]

CVE-2025-38521 – Imagination DRM GPU Runtime PM Callbacks Vulnerability

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix kernel crash when hard resetting the GPU The GPU hard reset sequence calls pm_runtime_force_suspend() and pm_runtime_force_resume(), which according to their documentation should only be used during system-wide PM transitions to sleep states. The main issue though is that depending on some internal runtime […]

CVE-2025-38520 – AMDGPU Linux Kernel Deadlock Vulnerability

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Don’t call mmput from MMU notifier callback If the process is exiting, the mmput inside mmu notifier callback from compactd or fork or numa balancing could release the last reference of mm struct to call exit_mmap and free_pgtable, this triggers deadlock with below backtrace. […]