CVE-2025-39705 drm/amd/display: fix a Null pointer dereference vulnerability
Information published.
Categories: Microsoft
CVE-2026-6100 Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
Information published.
Categories: Microsoft
CVE-2026-3195 Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)
Information published.
Categories: Microsoft
CVE-2025-21696 mm: clear uffd-wp PTE/PMD state on mremap()
Information published.
Categories: Microsoft
CVE-2025-38717 net: kcm: Fix race condition in kcm_unattach()
Information published.
Categories: Microsoft
CVE-2026-53151 rxrpc: Fix the ACK parser to extract the SACK table for parsing
Information published.
Categories: Microsoft
CVE-2026-52954 libceph: handle rbtree insertion error in decode_choose_args()
Information published.
Categories: Microsoft
CVE-2026-31419 net: bonding: fix use-after-free in bond_xmit_broadcast()
Information published.
Categories: Microsoft
CVE-2026-0864 Configuration Injection via Carriage Return (\r) in write() method
Information published.
Categories: Microsoft
CVE-2025-21672 afs: Fix merge preference rule failure condition
Information published.
Categories: Microsoft
CVE-2026-52946 fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
Information published.
Categories: Microsoft
CVE-2026-53120 PCI: use generic driver_override infrastructure
Information published.
Categories: Microsoft
CVE-2026-23472 serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
Information published.
Categories: Microsoft
CVE-2026-11972 tarfile opened in streaming mode mishandles EOF
Information published.
Categories: Microsoft
CVE-2025-21634 cgroup/cpuset: remove kernfs active break
Information published.
Categories: Microsoft
CVE-2026-53255 Bluetooth: MGMT: validate advertising TLV before type checks
Information published.
Categories: Microsoft
CVE-2026-53089 bpf: Fix use-after-free in offloaded map/prog info fill
Information published.
Categories: Microsoft
CVE-2026-35387 OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms.
Information published.
Categories: Microsoft
