Articles from December 2025
Browse all Windows news articles published in December 2025
Sequoia Ships Emergency Patch for OpenPGP Bug That Crashes Apps with a Single Malicious Email
The Sequoia PGP team has rolled out version 2.1.0 of its OpenPGP library to fix a denial-of-service flaw that lets attackers crash email clients, servers, and any decryption-dependent application...
Microsoft Exposes Linux Kernel Crash Bug in Intel Xe GPUs: How to Patch and Protect Your System
A newly disclosed Linux kernel vulnerability, tracked as CVE-2025-68193, can crash systems equipped with Intel Xe graphics processors, Microsoft’s Security Response Center confirmed on December 16....
WSL2 Users with AMD GPUs Need to Update After Microsoft Patches Kernel Crash Bug
Microsoft has released an update for the Windows Subsystem for Linux 2 (WSL2) kernel after a security flaw was discovered in the AMDGPU driver that could allow a local attacker to crash a Linux...
CVE-2025-68224: How a Single Line of Code Can Unbreak Your Linux Storage
On December 16, 2025, the Linux kernel’s maintainers disclosed and patched a race condition in the SCSI subsystem that could cause UFS-based storage to fail during system boot on certain embedded...
WolfSSL 5.8.4 Closes Timing Leak on ESP32 and Xtensa Devices That Could Expose Keys
WolfSSL has released version 5.8.4 to patch a timing side-channel vulnerability that could allow attackers to recover private keys from devices built with the popular embedded TLS library. Tracked as...
CVE-2025-68233 Kernel Patch Fixes Tegra DRM PID Resource Leak
A seemingly minor but significant security vulnerability in the Linux kernel has been addressed with the publication of CVE-2025-68233, which fixes a process identifier (PID) resource leak in the...
CVE-2025-68254: Linux Kernel Wi-Fi Driver Vulnerability Explained
A significant security vulnerability has been identified in the Linux kernel's Wi-Fi subsystem, specifically affecting the rtl8723bs driver used in numerous embedded devices and development boards....
Linux MTD Overflow Patch CVE-2025-68237: Security Implications & Windows Parallels
A critical vulnerability in the Linux kernel's Memory Technology Device (MTD) subsystem, designated CVE-2025-68237, has been patched, addressing an integer overflow flaw in the mtdchar read/write...
Linux Kernel Patch CVE-2025-68206 Fixes FTP Data Transfer Breakage in nftables NAT
The Linux kernel maintainers have quietly patched a subtle but disruptive vulnerability in the netfilter subsystem that specifically affected FTP connections passing through Network Address...
CVE-2025-68209: Linux Kernel mlx5 Driver Fix Restores RDMA Stability
A critical vulnerability in the Linux kernel's mlx5 driver, tracked as CVE-2025-68209, has been patched in mid-December 2024, addressing a subtle but significant stability issue affecting systems...
binfmt_misc write bug CVE-2025-68239 patched in Linux kernel mainline.
A subtle but significant security vulnerability in the Linux kernel's binary format handler has been quietly patched upstream, assigned CVE-2025-68239. This bug in the binfmt_misc subsystem could...
Patch now: Linux kernel CVE-2025-40355 allows local privilege escalation via sysfs namespace moves.
A newly disclosed vulnerability in the Linux kernel, designated CVE-2025-40355, exposes a subtle but significant flaw in how the kernel handles ownership changes of sysfs directories during network...