Skip to content
OpenAdvisories
High WID-SEC-2025-0309 9 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Feb 10, 2025 · Updated Nov 10, 2026 · Revision 53 · de

Vendor: amazon Vendor: Debian Vendor: Dell Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: DataPower Gateway Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: PowerProtect Data Domain Product: Rocky Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und um seine Privilegien zu eskalieren.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 9

  • High 7.8
    CVE-2025-21687

    vfio/platform: check the bounds of read/write syscalls

    In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bo…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-21692 Public exploit

    net: sched: fix ets qdisc OOB Indexing

    In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Yan <g1042620637@gmail.com> found that ets_class_from_arg() can index an Out-Of-Bound class in ets_class_from_arg() when passed clid of 0. The ov…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-21693

    mm: zswap: properly synchronize freeing resources during CPU hotunplug

    In the Linux kernel, the following vulnerability has been resolved: mm: zswap: properly synchronize freeing resources during CPU hotunplug In zswap_compress() and zswap_decompress(), the per-CPU acomp_ctx of the current CPU at the beginning of the operation i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2024-57950

    drm/amd/display: Initialize denominator defaults to 1

    In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize denominator defaults to 1 [WHAT & HOW] Variables, used as denominators and maybe not assigned to other values, should be initialized to non-zero to avoid DIVIDE_BY…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2025-21689

    USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()

    In the Linux kernel, the following vulnerability has been resolved: USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() This patch addresses a null-ptr-deref in qt2_process_read_urb() due to an incorrect bounds check in the following: if (newp…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.5
    CVE-2025-21690

    scsi: storvsc: Ratelimit warning logs to prevent VM denial of service

    In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 4.7
    CVE-2025-21688

    drm/v3d: Assign job pointer to NULL before signaling the fence

    In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Assign job pointer to NULL before signaling the fence In commit e4b5ccd392b9 ("drm/v3d: Ensure job pointer is set to NULL after job completion"), we introduced a change to assign the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-21686 Rejected

    This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

    linux-raspi2 linux-hwe linux-azure linux-riscv Ubuntu
  • Unscored —
    CVE-2025-21691

    cachestat: fix page cache statistics permission checking

    In the Linux kernel, the following vulnerability has been resolved: cachestat: fix page cache statistics permission checking When the 'cachestat()' system call was added in commit cf264e1329fb ("cachestat: implement cachestat syscall"), it was meant to be a m…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Revision history

  1. #53

    Neue Updates von Ubuntu aufgenommen

  2. #52

    Neue Updates von Ubuntu aufgenommen

  3. #51

    Neue Updates von Ubuntu aufgenommen

  4. #50

    Neue Updates von Ubuntu aufgenommen

  5. #49

    Neue Updates von IBM aufgenommen

  6. #48

    Neue Updates von Red Hat aufgenommen

  7. #47

    Neue Updates von SUSE aufgenommen

  8. #46

    Neue Updates von SUSE aufgenommen

  9. #45

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  10. #44

    Neue Updates von Oracle Linux aufgenommen

  11. #43

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  12. #42

    Neue Updates von Red Hat aufgenommen

  13. #41

    Neue Updates von SUSE aufgenommen

  14. #40

    Neue Updates von SUSE aufgenommen

  15. #39

    Neue Updates von SUSE aufgenommen

  16. #38

    Neue Updates von SUSE aufgenommen

  17. #37

    Neue Updates von SUSE aufgenommen

  18. #36

    Neue Updates von SUSE aufgenommen

  19. #35

    Neue Updates von Dell aufgenommen

  20. #34

    PoC aufgenommen

  21. #33

    Neue Updates von Oracle Linux aufgenommen

  22. #32

    Neue Updates von Ubuntu aufgenommen

  23. #31

    Neue Updates von Oracle Linux aufgenommen

  24. #30

    Neue Updates von Ubuntu aufgenommen

  25. #29

    Neue Updates von Ubuntu aufgenommen

References