Microsoft has added a defensive integrity check to the Common Log File System (CLFS) driver: CLFS now attaches a hash‑based message authentication code (HMAC) to each Base Log File (.blf) and its containers, validates that HMAC before parsing, and will refuse to open any logfile whose...
A new Linux-kernel vulnerability tracked as CVE-2025-40135 has been closed upstream by adding Read‑Copy‑Update (RCU) protection to the IPv6 transmit path: the ip6_xmit code now uses RCU-aware device access (dst_dev_rcu to avoid a possible use‑after‑free (UAF) that could otherwise trigger kernel...
The Linux kernel received a targeted fix for CVE-2025-40057 — a resource‑allocation/validation bug in the PTP (Precision Time Protocol) subsystem that adds an upper bound to the user‑controlled max_vclocks parameter so that kernel allocations performed with kcalloc cannot be overflowed or...