CVE-2025-10070 – Portabilis i-Educar enturmacao-em-lote access control

The following table lists the changes that have been made to the CVE-2025-10070 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] Sep. 07, 2025 Action […]

CVE-2025-48042 – Before action hooks may execute in certain scenarios despite a request being forbidden

The following table lists the changes that have been made to the CVE-2025-48042 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by 6b3ad84c-e1a6-4bf7-a703-f496b71e49db Sep. 07, 2025 Action […]

CVE-2025-39734 – Revert “fs/ntfs3: Replace inode_trylock with inode_lock”

In the Linux kernel, the following vulnerability has been resolved: Revert “fs/ntfs3: Replace inode_trylock with inode_lock” This reverts commit 69505fe98f198ee813898cbcaf6770949636430b. Initially, conditional lock acquisition was removed to fix an xfstest bug that was observed during internal testing. The deadlock reported by syzbot is resolved by reintroducing conditional acquisition. The xfstest bug no longer occurs on […]

CVE-2025-39733 – team: replace team lock with rtnl lock

Affected Products The following products are affected by CVE-2025-39733 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below. No affected product recoded yet

CVE-2025-39732 – wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() ath11k_mac_disable_peer_fixed_rate() is passed as the iterator to ieee80211_iterate_stations_atomic(). Note in this case the iterator is required to be atomic, however ath11k_mac_disable_peer_fixed_rate() does not follow it as it might sleep. Consequently below warning is seen: BUG: sleeping function called from […]

CVE-2025-39731 – f2fs: vm_unmap_ram() may be called from an invalid context

In the Linux kernel, the following vulnerability has been resolved: f2fs: vm_unmap_ram() may be called from an invalid context When testing F2FS with xfstests using UFS backed virtual disks the kernel complains sometimes that f2fs_release_decomp_mem() calls vm_unmap_ram() from an invalid context. Example trace from f2fs/007 test: f2fs/007 5s … [12:59:38][ 8.902525] run fstests f2fs/007 [ […]

CVE-2025-39727 – mm: swap: fix potential buffer overflow in setup_clusters()

In the Linux kernel, the following vulnerability has been resolved: mm: swap: fix potential buffer overflow in setup_clusters() In setup_swap_map(), we only ensure badpages are in range (0, last_page]. As maxpages might be = maxpages. Only call inc_cluster_info_page() for badpage which is < maxpages to fix the issue.