Skip to content
OpenAdvisories
Medium WID-SEC-2025-0797 5 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service

Published Apr 14, 2025 · Updated Apr 14, 2025 · de-DE

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 5

  • High 8.2

    NFSD: prevent integer overflow on 32 bit systems

    In the Linux kernel, the following vulnerability has been resolved: NFSD: prevent integer overflow on 32 bit systems On a 32 bit system, the "len * sizeof(*p)" operation can have an integer overflow.

  • Medium 5.5

    drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq() The > ARRAY_SIZE() should be >= ARRAY_SIZE() to prevent an out of bounds access.

  • Medium 5.5

    ksmbd: fix reference count leak in smb_check_perm_dacl()

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smb_check_perm_dacl() The issue happens in a specific path in smb_check_perm_dacl(). When "id" and "uid" have the same value, the function simply jumps out …

  • Medium 5.5

    jffs2: fix memory leak in jffs2_do_fill_super

    In the Linux kernel, the following vulnerability has been resolved: jffs2: fix memory leak in jffs2_do_fill_super If jffs2_iget() or d_make_root() in jffs2_do_fill_super() returns an error, we can observe the following kmemleak report: -----------------------…

  • Medium 4.7

    nbd: fix race between nbd_alloc_config() and module removal

    In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between nbd_alloc_config() and module removal When nbd module is being removing, nbd_alloc_config() may be called concurrently by nbd_genl_connect(), although try_module_get() w…

Revision history

  1. #1

    Initiale Fassung

References