2025

In the Linux kernel, the following vulnerability has been resolved: tty: serial: ip22zilog: Use platform device for pro

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Avoid deadlock between PCI error recovery

In the Linux kernel, the following vulnerability has been resolved: PCI/AER: Fix NULL pointer access by aer_info The k

In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: leaf: Fix potential infinite loop

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_xmit_callback(): fix handling o

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix kernel crash when r

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Prevent race in socket write i

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: lookup hci_conn on RX path on

In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel: punit_ipc: fix memory corrupti

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgbe

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX

In the Linux kernel, the following vulnerability has been resolved: fs/namespace: fix reference leak in grab_requested_

In the Linux kernel, the following vulnerability has been resolved: afs: Fix delayed allocation of a cell's anonymous k

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_i

In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in process_v2_sparse_read() for enc

In the Linux kernel, the following vulnerability has been resolved: drm, fbcon, vga_switcheroo: Avoid race condition in

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix memory leak in cifs_construct_tcon

In the Linux kernel, the following vulnerability has been resolved: io_uring/net: ensure vectored buffer node import is

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix NULL pointer deference when spl

In the Linux kernel, the following vulnerability has been resolved: mm/memfd: fix information leak in hugetlb folios W

In the Linux kernel, the following vulnerability has been resolved: mptcp: Initialise rcv_mss before calling tcp_send_a

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure T

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix memory leak in eem_unwrap

In the Linux kernel, the following vulnerability has been resolved: usb: storage: Fix memory leak in USB bulk transport

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dw

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check NULL before accessing [WHAT

In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_a

In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds writes in

In the Linux kernel, the following vulnerability has been resolved: libceph: replace BUG_ON with bounds check for map->

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: fix use-after-free in usb_gadget_

In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSH

In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page

In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token in

In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab

In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup

In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test

In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration

An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not impleme

When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves documents to a file system with

When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system witho

InvoicePlane commit debb446c is vulnerable to Incorrect Access Control. The invoices/view handler fails to verify owners

HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which ma

In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Librar

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: bug fix while parsing mipi-sdca-control

In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk

In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin request_queue lifetime The namespa

In the Linux kernel, the following vulnerability has been resolved: ext4: refresh inline data size before write operati

In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free in ipc_msg_send_requ