CVE-2025-38090 drivers/rapidio/rio_cm.c: prevent possible heap overwrite
Information published. Continue reading CVE-2025-38090 drivers/rapidio/rio_cm.c: prevent possible heap overwrite
Month: February 2026
CVE-2024-44987 ipv6: prevent UAF in ip6_send_skb()
Information published. Continue reading CVE-2024-44987 ipv6: prevent UAF in ip6_send_skb()
CVE-2020-26160 jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m[“aud”] (which is allowed by the specification). Because the type assertion fails “” is the value of aud. This is a security problem if the JWT token is presented to a service that lacks its own audience check.
CVE-2024-56757 Bluetooth: btusb: mediatek: add intf release flow when usb disconnect
CVE-2023-41915 OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0.
CVE-2025-21748 ksmbd: fix integer overflows on 32 bit systems
Information published. Continue reading CVE-2025-21748 ksmbd: fix integer overflows on 32 bit systems
CVE-2024-47710 sock_map: Add a cond_resched() in sock_hash_free()
Information published. Continue reading CVE-2024-47710 sock_map: Add a cond_resched() in sock_hash_free()