Month: February 2026

Information published. Continue reading CVE-2025-37739 f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()→

Information published. Continue reading CVE-2025-38183 net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()→

Information published. Continue reading CVE-2023-0664 A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent’s Windows installer via repair custom actions to elevate their privileges on the system.→

Information published. Continue reading CVE-2025-37805 sound/virtio: Fix cancel_sync warnings on uninitialized work_structs→

Information published. Continue reading CVE-2024-39494 ima: Fix use-after-free on a dentry’s dname.name→

Information published. Continue reading CVE-2025-38231 nfsd: Initialize ssc before laundromat_work to prevent NULL dereference→

Information published. Continue reading CVE-2024-57254 An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem.→

Information published. Continue reading CVE-2024-0752 A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an exploitable crash. This vulnerability affects Firefox < 122.→