Уязвимости

1. Chromium: CVE-2023-4863 Heap buffer overflow in WebP

   Updated product information in the Software Update table. This is an informational change only.

2. CVE-2025-40025 f2fs: fix to do sanity check on node footer for non inode dnode

   Information published.

3. CVE-2025-40051 vhost: vringh: Modify the return value check

   Information published.

4. CVE-2025-40077 f2fs: fix to avoid overflow while left shift operation

   Information published.

5. CVE-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev().

   Information published.

6. CVE-2025-40038 KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid

   Information published.

7. CVE-2025-40042 tracing: Fix race condition in kprobe initialization causing NULL pointer dereference

   Information published.

8. CVE-2025-40029 bus: fsl-mc: Check return value of platform_get_resource()

   Information published.

9. CVE-2025-40061 RDMA/rxe: Fix race in do_task() when draining

   Information published.

10. CVE-2025-40078 bpf: Explicitly check accesses to bpf_sock_addr

    Information published.

11. CVE-2025-40044 fs: udf: fix OOB read in lengthAllocDescs handling

    Information published.

12. CVE-2025-40052 smb: client: fix crypto buffers in non-linear memory

    Information published.

13. CVE-2025-40030 pinctrl: check the return value of pinmux_ops::get_function_name()

    Information published.

14. CVE-2025-40035 Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak

    Information published.

15. CVE-2025-40053 net: dlink: handle copy_thresh allocation failure

    Information published.

16. CVE-2025-40055 ocfs2: fix double free in user_cluster_connect()

    Information published.

17. CVE-2025-40056 vhost: vringh: Fix copy_to_iter return value check

    Information published.

18. CVE-2025-40040 mm/ksm: fix flag-dropping behavior in ksm_madvise

    Information published.

19. CVE-2025-40026 KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

    Information published.

20. CVE-2025-40060 coresight: trbe: Return NULL pointer for allocation failures

    Information published.