Most recent entries from all

bdu:2025-13889

Withdrawn: BELL-CVE-2025-39867 — CVE-2025-39867 does not affect BellSoft software

Withdrawn by the publisher.

fkie_cve-2025-39867

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

GHSA-945m-m359-mmj7

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_pipapo: fix null deref for empty set

Blamed commit broke the check for a null scratch map: - if (unlikely(!m || !*raw_cpu_ptr(m->scratch))) + if (unlikely(!raw_cpu_ptr(m->scratch)))

This should have been "if (!*raw_ ...)". Use the pattern of the avx2 version which is more readable.

This can only be reproduced if avx2 support isn't available.

msrc_CVE-2025-39867 — netfilter: nft_set_pipapo: fix null deref for empty set

msrc_CVE-2025-39867

UBUNTU-CVE-2025-39867

Affected: Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 78 more

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

WID-SEC-W-2025-2107 — Linux Kernel: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher beschriebene Auswirkungen zu erzielen.