Summary
Ein entfernter Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht spezifizierte Auswirkungen zu verursachen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 85
-
Critical 9.8
ksmbd: add free_transport ops in ksmbd connection
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add free_transport ops in ksmbd connection free_transport function for tcp connection can be called from smbdirect. It will cause kernel oops. This patch add free_transport ops in ksmb…
-
High 8.8
hisi_acc_vfio_pci: bugfix live migration function without VF device driver
In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address o…
-
High 8.8
wifi: ath12k: fix node corruption in ar->arvifs list
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix node corruption in ar->arvifs list In current WLAN recovery code flow, ath12k_core_halt() only reinitializes the "arvifs" list head. This will cause the list node immediatel…
-
High 8.8
wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash Currently, we encounter the following kernel call trace when a firmware crash occurs. This happens because the hos…
-
High 8.8
wifi: ath12k: fix invalid access to memory
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and boolean is_continuation is part of rxcb. Currently, after freeing the skb, the rxcb->i…
-
High 8.8
wifi: ath11k: fix node corruption in ar->arvifs list
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix node corruption in ar->arvifs list In current WLAN recovery code flow, ath11k_core_halt() only reinitializes the "arvifs" list head. This will cause the list node immediatel…
-
High 8.3
wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA IEEE 802.11 fragmentation can only be applied to unicast frames. Therefore, drop fragments with multicast or broadcast RA. Th…
-
High 7.8
net: drv: netdevsim: don't napi_complete() from netpoll
In the Linux kernel, the following vulnerability has been resolved: net: drv: netdevsim: don't napi_complete() from netpoll netdevsim supports netpoll. Make sure we don't call napi_complete() from it, since it may not be scheduled. Breno reports hitting a war…
-
High 7.8
net: tipc: fix refcount warning in tipc_aead_encrypt
In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix refcount warning in tipc_aead_encrypt syzbot reported a refcount warning [1] caused by calling get_net() on a network namespace that is being destroyed (refcount=0). This happe…
-
High 7.8
fs/dax: Fix "don't skip locked entries when scanning entries"
In the Linux kernel, the following vulnerability has been resolved: fs/dax: Fix "don't skip locked entries when scanning entries" Commit 6be3e21d25ca ("fs/dax: don't skip locked entries when scanning entries") introduced a new function, wait_entry_unlocked_ex…
-
High 7.8
octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback This patch addresses below issues, 1. Active traffic on the leaf node must be stopped before its send queue is reassigned to the pare…
-
High 7.8
Bluetooth: eir: Fix possible crashes on eir_create_adv_data
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix possible crashes on eir_create_adv_data eir_create_adv_data may attempt to add EIR_FLAGS and EIR_TX_POWER without checking if that would fit.
-
High 7.8
fs/fhandle.c: fix a race in call of has_locked_children()
In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of has_locked_children() may_decode_fh() is calling has_locked_children() while holding no locks. That's an oopsable race... The rest of the callers are safe …
-
High 7.8
wifi: ath12k: Fix buffer overflow in debugfs
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix buffer overflow in debugfs If the user tries to write more than 32 bytes then it results in memory corruption. Fortunately, this is debugfs so it's limited to root users.
-
High 7.8
smb: Log an error when close_all_cached_dirs fails
In the Linux kernel, the following vulnerability has been resolved: smb: Log an error when close_all_cached_dirs fails Under low-memory conditions, close_all_cached_dirs() can't move the dentries to a separate list to dput() them once the locks are dropped. T…
-
High 7.8
f2fs: fix to bail out in get_new_segment()
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to bail out in get_new_segment() ------------[ cut here ]------------ WARNING: CPU: 3 PID: 579 at fs/f2fs/segment.c:2832 new_curseg+0x5e8/0x6dc pc : new_curseg+0x5e8/0x6dc Call trac…
-
High 7.8
powerpc/bpf: fix JIT code size calculation of bpf trampoline
In the Linux kernel, the following vulnerability has been resolved: powerpc/bpf: fix JIT code size calculation of bpf trampoline arch_bpf_trampoline_size() provides JIT size of the BPF trampoline before the buffer for JIT'ing it is allocated. The total number…
-
High 7.8
eth: fbnic: avoid double free when failing to DMA-map FW msg
In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-map FW msg The semantics are that caller of fbnic_mbx_map_msg() retains the ownership of the message on error. All existing callers dutifully…
-
High 7.8
ftrace: Fix UAF when lookup kallsym after ftrace disabled
In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens with a buggy module: BUG: unable to handle page fault for address: ffffffffc05d0218 PGD 1bd66f067 P4D 1bd…
-
High 7.5
IB/cm: Drop lockdep assert and WARN when freeing old msg
In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion handler can run after cm_id has advanced to another message. The cm_id lock is not needed in this case, but a rece…
-
High 7.5
net: ethernet: cortina: Use TOE/TSO on all TCP
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Use TOE/TSO on all TCP It is desireable to push the hardware accelerator to also process non-segmented TCP frames: we pass the skb->len to the "TOE/TSO" offloader and …
-
High 7.3
virtio-pci: Fix result size returned for the admin command completion
In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtio_pci_admin_dev_parts_get() is 8 bytes larger than the actual result data size. This occ…
-
High 7.0
software node: Correct a OOB check in software_node_get_reference_args()
In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args() software_node_get_reference_args() wants to get @index-th element, so the property value requires at least '(index + 1…
-
Unscored —
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept s…
-
Unscored —
serial: jsm: fix NPE during jsm_uart_port_init
In the Linux kernel, the following vulnerability has been resolved: serial: jsm: fix NPE during jsm_uart_port_init No device was set which caused serial_base_ctrl_add to crash. BUG: kernel NULL pointer dereference, address: 0000000000000050 Oops: Oops: 0000 […
-
Unscored —
pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms
In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms Commit 3ef9f710efcb ("pinctrl: mediatek: Add EINT support for multiple addresses") introduced an access to the 'soc' …
-
Unscored —
ring-buffer: Do not trigger WARN_ON() due to a commit_overrun
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun When reading a memory mapped buffer the reader page is just swapped out with the last page written in the write buffer. If the re…
-
Unscored —
usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work A state check was previously added to tcpm_queue_vdm_unlocked to prevent a deadlock where the DisplayPort Alt Mode driver w…
-
Unscored —
btrfs: exit after state insertion failure at btrfs_convert_extent_bit()
In the Linux kernel, the following vulnerability has been resolved: btrfs: exit after state insertion failure at btrfs_convert_extent_bit() If insert_state() state failed it returns an error pointer and we call extent_io_tree_panic() which will trigger a BUG(…
-
Unscored —
net: prevent a NULL deref in rtnl_create_link()
In the Linux kernel, the following vulnerability has been resolved: net: prevent a NULL deref in rtnl_create_link() At the time rtnl_create_link() is running, dev->netdev_ops is NULL, we must not use netdev_lock_ops() or risk a NULL deref if CONFIG_NET_SHAPER…
-
Unscored —
net: dsa: b53: do not enable EEE on bcm63xx
In the Linux kernel, the following vulnerability has been resolved: net: dsa: b53: do not enable EEE on bcm63xx BCM63xx internal switches do not support EEE, but provide multiple RGMII ports where external PHYs may be connected. If one of these PHYs are EEE c…
-
Unscored —
fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
In the Linux kernel, the following vulnerability has been resolved: fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() fpga_mgr_test_img_load_sgt() allocates memory for sgt using kunit_kzalloc() however it does not check if the allocation …
-
Unscored —
phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug The qmp_usb_iomap() helper function currently returns the raw result of devm_ioremap() for non-exclusive mappings. Since devm_ioremap() may retu…
-
Unscored —
mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
In the Linux kernel, the following vulnerability has been resolved: mtd: nand: ecc-mxic: Fix use of uninitialized variable ret If ctx->steps is zero, the loop processing ECC steps is skipped, and the variable ret remains uninitialized. It is later checked and…
-
Unscored —
bpf: Do not include stack ptr register in precision backtracking bookkeeping
In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi Lai reported an issue ([1]) where the following warning appears in kernel dmesg: [ 60.643604] verifier backtrac…
-
Unscored —
bpf: Avoid __bpf_prog_ret0_warn when jit fails
In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid __bpf_prog_ret0_warn when jit fails syzkaller reported an issue: WARNING: CPU: 3 PID: 217 at kernel/bpf/core.c:2357 __bpf_prog_ret0_warn+0xa/0x20 kernel/bpf/core.c:2357 Modules lin…
-
Unscored —
wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init devm_kasprintf() can return a NULL pointer on failure,but this returned value in mt7996_thermal_init() is not checked. Add NULL check…
-
Unscored —
kernfs: Relax constraint in draining guard
In the Linux kernel, the following vulnerability has been resolved: kernfs: Relax constraint in draining guard The active reference lifecycle provides the break/unbreak mechanism but the active reference is not truly active after unbreak -- callers don't use …
-
Unscored —
wifi: rtw89: pci: configure manual DAC mode via PCI config API only
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: configure manual DAC mode via PCI config API only To support 36-bit DMA, configure chip proprietary bit via PCI config API or chip DBI interface. However, the PCI device mma…
-
Unscored —
bpf: Fix WARN() in get_bpf_raw_tp_regs
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARN() in get_bpf_raw_tp_regs syzkaller reported an issue: WARNING: CPU: 3 PID: 5971 at kernel/trace/bpf_trace.c:1861 get_bpf_raw_tp_regs+0xa4/0x100 kernel/trace/bpf_trace.c:1861 Mod…
-
Unscored —
pinctrl: at91: Fix possible out-of-boundary access
In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that given OF alias is not available or something went wrong when trying to get it. This might have conseque…
-
Unscored —
scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels
In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels Correct kernel call trace when calling smp_processor_id() when called in preemptible kernels by using raw_smp_process…
-
Unscored —
scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk Smatch detected a potential use-after-free of an ndlp oject in dev_loss_tmo_callbk during driver unload or fatal error h…
-
Unscored —
wifi: ath12k: fix NULL access in assign channel context handler
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL access in assign channel context handler Currently, when ath12k_mac_assign_vif_to_vdev() fails, the radio handle (ar) gets accessed from the link VIF handle (arvif) for…
-
Unscored —
perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create()
In the Linux kernel, the following vulnerability has been resolved: perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create() The Amlogic DDR PMU driver meson_ddr_pmu_create() function incorrectly uses smp_processor_id(), …
-
Unscored —
ACPI: platform_profile: Avoid initializing on non-ACPI platforms
In the Linux kernel, the following vulnerability has been resolved: ACPI: platform_profile: Avoid initializing on non-ACPI platforms The platform profile driver is loaded even on platforms that do not have ACPI enabled. The initialization of the sysfs entries…
-
Unscored —
PM: EM: Fix potential division-by-zero error in em_compute_costs()
In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix potential division-by-zero error in em_compute_costs() When the device is of a non-CPU type, table[i].performance won't be initialized in the previous em_init_performance(), resul…
-
Unscored —
EDAC/skx_common: Fix general protection fault
In the Linux kernel, the following vulnerability has been resolved: EDAC/skx_common: Fix general protection fault After loading i10nm_edac (which automatically loads skx_edac_common), if unload only i10nm_edac, then reload it and perform error injection testi…
-
Unscored —
ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() ETDM2_IN_BE and ETDM1_OUT_BE are defined as COMP_EMPTY(), in the case the codec dai_name will be null. Avoid a crash if the device t…
-
Unscored —
crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare()
In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() Fix two DMA cleanup issues on the error path in sun8i_ce_cipher_prepare(): 1] If dma_map_sg() fails for areq->dst, th…
-
Unscored —
nvmem: zynqmp_nvmem: unbreak driver after cleanup
In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: unbreak driver after cleanup Commit 29be47fcd6a0 ("nvmem: zynqmp_nvmem: zynqmp_nvmem_probe cleanup") changed the driver to expect the device pointer to be passed as the "…
-
Unscored —
block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work
In the Linux kernel, the following vulnerability has been resolved: block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work Bios queued up in the zone write plug have already gone through all all preparation in the submit_bio path, including the…
-
Unscored —
Bluetooth: Fix NULL pointer deference on eir_get_service_data
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix NULL pointer deference on eir_get_service_data The len parameter is considered optional so it can be NULL so it cannot be used for skipping to next entry of EIR_SERVICE_DATA.
-
Unscored —
ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
In the Linux kernel, the following vulnerability has been resolved: ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() There is no disagreement that we should check both ptp->is_virtual_clock and ptp->n_vclocks to check if the ptp virtual clock is …
-
Unscored —
ASoC: Intel: avs: Verify content returned by parse_int_array()
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parse_int_array() The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with …
-
Unscored —
ASoC: Intel: avs: Fix possible null-ptr-deref when initing hw
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix possible null-ptr-deref when initing hw Search result of avs_dai_find_path_template() shall be verified before being used. As 'template' is already known when avs_hw_con…
-
Unscored —
drm/xe/vm: move xe_svm_init() earlier
In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: move xe_svm_init() earlier In xe_vm_close_and_put() we need to be able to call xe_svm_fini(), however during vm creation we can call this on the error path, before having actually …
-
Unscored —
seg6: Fix validation of nexthop addresses
In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel read…
-
Unscored —
iavf: get rid of the crit lock
In the Linux kernel, the following vulnerability has been resolved: iavf: get rid of the crit lock Get rid of the crit lock. That frees us from the error prone logic of try_locks. Thanks to netdev_lock() by Jakub it is now easy, and in most cases we were prot…
-
Unscored —
fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() In fb_find_mode_cvt(), iff mode->refresh somehow happens to be 0x80000000, cvt.f_refresh will become 0 when multiplying it by 2 due…
-
Unscored —
bus: fsl-mc: fix double-free on mc_dev
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mc_dev The blamed commit tried to simplify how the deallocations are done but, in the process, introduced a double-free on the mc_dev variable. In case the MC …
-
Unscored —
Bluetooth: btintel: Check dsbr size from EFI variable
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Check dsbr size from EFI variable Since the size of struct btintel_dsbr is already known, we can just start there instead of querying the EFI variable size. If the final r…
-
Unscored —
wifi: mt76: mt7996: avoid NULL pointer dereference in mt7996_set_monitor()
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: avoid NULL pointer dereference in mt7996_set_monitor() The function mt7996_set_monitor() dereferences phy before the NULL sanity check. Fix this to avoid NULL pointer dere…
-
Unscored —
perf: arm-ni: Fix missing platform_set_drvdata()
In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Fix missing platform_set_drvdata() Add missing platform_set_drvdata in arm_ni_probe(), otherwise calling platform_get_drvdata() in remove returns NULL.
-
Unscored —
drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table The function atomctrl_initialize_mc_reg_table() and atomctrl_initialize_mc_reg_table_v2_2() does not che…
-
Unscored —
arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
In the Linux kernel, the following vulnerability has been resolved: arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() KASAN reports a stack-out-of-bounds read in regs_get_kernel_stack_nth(). Call Trace: [ 97.283505] BUG: KASAN: stack-o…
-
Unscored —
perf/x86/intel: Fix crash in icl_update_topdown_event()
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix crash in icl_update_topdown_event() The perf_fuzzer found a hard-lockup crash on a RaptorLake machine: Oops: general protection fault, maybe for address 0xffff89aeceab400:…
-
Unscored —
net: atm: add lec_mutex
In the Linux kernel, the following vulnerability has been resolved: net: atm: add lec_mutex syzbot found its way in net/atm/lec.c, and found an error path in lecd_attach() could leave a dangling pointer in dev_lec[]. Add a mutex to protect dev_lecp[] uses fro…
-
Unscored —
mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
In the Linux kernel, the following vulnerability has been resolved: mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). As syzbot reported [0], mpls_route_input_rcu() can be called from mpls_getroute(), where is under RTNL. net->mpls.platform_label is…
-
Unscored —
aoe: clean device rq_list in aoedev_downdev()
In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rq_list in aoedev_downdev() An aoe device's rq_list contains accepted block requests that are waiting to be transmitted to the aoe target. This queue was added as part of th…
-
Unscored —
fgraph: Do not enable function_graph tracer when setting funcgraph-args
In the Linux kernel, the following vulnerability has been resolved: fgraph: Do not enable function_graph tracer when setting funcgraph-args When setting the funcgraph-args option when function graph tracer is net enabled, it incorrectly enables it. Worse, it …
-
Unscored —
jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
In the Linux kernel, the following vulnerability has been resolved: jffs2: check jffs2_prealloc_raw_node_refs() result in few other places Fuzzing hit another invalid pointer dereference due to the lack of checking whether jffs2_prealloc_raw_node_refs() compl…
-
Unscored —
firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)
In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info) KASAN reported out of bounds access - cs_dsp_mock_wmfw_add_info(), because the source string length was rounded up to th…
-
Unscored —
firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) KASAN reported out of bounds access - cs_dsp_ctl_cache_init_multiple_offsets(). The code uses mock_coeff_template.length…
-
Unscored —
scsi: lpfc: Use memcpy() for BIOS version
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy() for BIOS version The strlcat() with FORTIFY support is triggering a panic because it thinks the target buffer will overflow although the correct target buffer size is…
-
Unscored —
x86/sgx: Prevent attempts to reclaim poisoned pages
In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Prevent attempts to reclaim poisoned pages TL;DR: SGX page reclaim touches the page to copy its contents to secondary storage. SGX instructions do not gracefully handle machine check…
-
Unscored —
Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
In the Linux kernel, the following vulnerability has been resolved: Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT When enabling PREEMPT_RT, the gpio_keys_irq_timer() callback runs in hard irq context, but the input_event() takes a spin_lock, whi…
-
Unscored —
ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
In the Linux kernel, the following vulnerability has been resolved: ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 The controller has a hardware bug that can hard hang the system when doing ATAPI DMAs without any trace of what happened. Depending…
-
Unscored —
jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
In the Linux kernel, the following vulnerability has been resolved: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() Since handle->h_transaction may be a NULL pointer, so we should change it to call is_handle_aborted(handle) first befor…
-
Unscored —
fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
In the Linux kernel, the following vulnerability has been resolved: fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() Sometimes, when a file was read while it was being truncated by another NFS client, the kernel could deadlock because folio_unlo…
-
Unscored —
firmware: cs_dsp: Fix OOB memory read access in KUnit test
In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test KASAN reported out of bounds access - cs_dsp_mock_bin_add_name_or_info(), because the source string length was rounded up to the all…
-
Unscored —
ACPICA: fix acpi parse and parseext cache leaks
In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi parse and parseext cache leaks ACPICA commit 8829e70e1360c81e7a5a901b5d4f48330e021ea5 I'm Seunghun Han, and I work for National Security Research Institute of South Korea. I …
-
Unscored —
ACPICA: fix acpi operand cache leak in dswstate.c
In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi operand cache leak in dswstate.c ACPICA commit 987a3b5cf7175916e2a4b6ea5b8e70f830dfe732 I found an ACPI cache leak in ACPI early termination and boot continuing case. When ea…
-
Unscored —
f2fs: fix to do sanity check on ino and xnid
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on ino and xnid syzbot reported a f2fs bug as below: INFO: task syz-executor140:5308 blocked for more than 143 seconds. Not tainted 6.14.0-rc7-syzkaller-00069-g81…
-
Unscored —
wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
In the Linux kernel, the following vulnerability has been resolved: wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() Robert Morris reported: |If a malicious USB device pretends to be an Intersil p54 wifi |interface and generates an eeprom_readba…
Revision history
-
#92
Neue Updates von Debian aufgenommen
-
#91
Neue Updates von Debian aufgenommen
-
#90
Neue Updates von Oracle Linux aufgenommen
-
#89
Neue Updates von IBM aufgenommen
-
#88
Neue Updates von Dell aufgenommen
-
#87
Neue Updates von Oracle Linux aufgenommen
-
#86
Neue Updates von Oracle Linux aufgenommen
-
#85
Neue Updates von Siemens aufgenommen
-
#84
Neue Updates von Oracle Linux aufgenommen
-
#83
Neue Updates von Red Hat aufgenommen
-
#82
Neue Updates von Red Hat aufgenommen
-
#81
Neue Updates von Debian aufgenommen
-
#80
Neue Updates von Oracle Linux aufgenommen
-
#79
Neue Updates von SUSE aufgenommen
-
#78
Neue Updates von SUSE aufgenommen
-
#77
Neue Updates von Ubuntu aufgenommen
-
#76
Neue Updates von SUSE und Oracle Linux aufgenommen
-
#75
Neue Updates von Red Hat aufgenommen
-
#74
Neue Updates von SUSE aufgenommen
-
#73
Neue Updates von Ubuntu und Oracle Linux aufgenommen
-
#72
Neue Updates von SUSE und openSUSE aufgenommen
-
#71
Neue Updates von SUSE aufgenommen
-
#70
Neue Updates von Ubuntu aufgenommen
-
#69
Neue Updates von SUSE aufgenommen
-
#68
Neue Updates von Ubuntu aufgenommen
References
-
Kernel CVE Announce Mailingliste
https://lore.kernel.org/linux-cve-announce/
-
Linux Kernel CVE Announcement CVE-2025-38265
https://lore.kernel.org/linux-cve-announce/2025071035-CVE-2025-38265-be37@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38266
https://lore.kernel.org/linux-cve-announce/2025071037-CVE-2025-38266-c33c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38267
https://lore.kernel.org/linux-cve-announce/2025071007-CVE-2025-38267-2f0c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38268
https://lore.kernel.org/linux-cve-announce/2025071007-CVE-2025-38268-3f41@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38269
https://lore.kernel.org/linux-cve-announce/2025071007-CVE-2025-38269-fb65@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38270
https://lore.kernel.org/linux-cve-announce/2025071008-CVE-2025-38270-c7b0@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38271
https://lore.kernel.org/linux-cve-announce/2025071008-CVE-2025-38271-5db2@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38272
https://lore.kernel.org/linux-cve-announce/2025071008-CVE-2025-38272-2f33@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38273
https://lore.kernel.org/linux-cve-announce/2025071008-CVE-2025-38273-6850@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38274
https://lore.kernel.org/linux-cve-announce/2025071008-CVE-2025-38274-087f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38275
https://lore.kernel.org/linux-cve-announce/2025071008-CVE-2025-38275-4db0@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38276
https://lore.kernel.org/linux-cve-announce/2025071009-CVE-2025-38276-fb95@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38277
https://lore.kernel.org/linux-cve-announce/2025071009-CVE-2025-38277-520c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38278
https://lore.kernel.org/linux-cve-announce/2025071009-CVE-2025-38278-2d3a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38279
https://lore.kernel.org/linux-cve-announce/2025071009-CVE-2025-38279-af9f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38280
https://lore.kernel.org/linux-cve-announce/2025071009-CVE-2025-38280-86b4@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38281
https://lore.kernel.org/linux-cve-announce/2025071009-CVE-2025-38281-ec50@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38282
https://lore.kernel.org/linux-cve-announce/2025071010-CVE-2025-38282-78a1@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38283
https://lore.kernel.org/linux-cve-announce/2025071010-CVE-2025-38283-a62b@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38284
https://lore.kernel.org/linux-cve-announce/2025071010-CVE-2025-38284-1574@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38285
https://lore.kernel.org/linux-cve-announce/2025071010-CVE-2025-38285-f415@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38286
https://lore.kernel.org/linux-cve-announce/2025071010-CVE-2025-38286-eab7@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38287
https://lore.kernel.org/linux-cve-announce/2025071011-CVE-2025-38287-b0ff@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38288
https://lore.kernel.org/linux-cve-announce/2025071011-CVE-2025-38288-5c5a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38289
https://lore.kernel.org/linux-cve-announce/2025071011-CVE-2025-38289-0d93@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38290
https://lore.kernel.org/linux-cve-announce/2025071011-CVE-2025-38290-36c3@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38291
https://lore.kernel.org/linux-cve-announce/2025071011-CVE-2025-38291-25a9@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38292
https://lore.kernel.org/linux-cve-announce/2025071011-CVE-2025-38292-e03a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38293
https://lore.kernel.org/linux-cve-announce/2025071012-CVE-2025-38293-8e77@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38294
https://lore.kernel.org/linux-cve-announce/2025071012-CVE-2025-38294-bc36@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38295
https://lore.kernel.org/linux-cve-announce/2025071012-CVE-2025-38295-da67@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38296
https://lore.kernel.org/linux-cve-announce/2025071012-CVE-2025-38296-1670@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38297
https://lore.kernel.org/linux-cve-announce/2025071012-CVE-2025-38297-9dee@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38298
https://lore.kernel.org/linux-cve-announce/2025071012-CVE-2025-38298-25d2@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38299
https://lore.kernel.org/linux-cve-announce/2025071013-CVE-2025-38299-c973@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38300
https://lore.kernel.org/linux-cve-announce/2025071013-CVE-2025-38300-f040@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38301
https://lore.kernel.org/linux-cve-announce/2025071013-CVE-2025-38301-694f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38302
https://lore.kernel.org/linux-cve-announce/2025071013-CVE-2025-38302-b915@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38303
https://lore.kernel.org/linux-cve-announce/2025071013-CVE-2025-38303-b6ab@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38304
https://lore.kernel.org/linux-cve-announce/2025071013-CVE-2025-38304-d021@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38305
https://lore.kernel.org/linux-cve-announce/2025071014-CVE-2025-38305-4ad3@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38306
https://lore.kernel.org/linux-cve-announce/2025071014-CVE-2025-38306-66ae@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38307
https://lore.kernel.org/linux-cve-announce/2025071014-CVE-2025-38307-fe9d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38308
https://lore.kernel.org/linux-cve-announce/2025071014-CVE-2025-38308-68c9@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38309
https://lore.kernel.org/linux-cve-announce/2025071014-CVE-2025-38309-9638@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38310
https://lore.kernel.org/linux-cve-announce/2025071014-CVE-2025-38310-6184@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38311
https://lore.kernel.org/linux-cve-announce/2025071015-CVE-2025-38311-2a53@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38312
https://lore.kernel.org/linux-cve-announce/2025071015-CVE-2025-38312-8693@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38313
https://lore.kernel.org/linux-cve-announce/2025071015-CVE-2025-38313-4e5a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38314
https://lore.kernel.org/linux-cve-announce/2025071015-CVE-2025-38314-5977@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38315
https://lore.kernel.org/linux-cve-announce/2025071015-CVE-2025-38315-ccfc@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38316
https://lore.kernel.org/linux-cve-announce/2025071015-CVE-2025-38316-2087@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38317
https://lore.kernel.org/linux-cve-announce/2025071016-CVE-2025-38317-efbf@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38318
https://lore.kernel.org/linux-cve-announce/2025071016-CVE-2025-38318-81bc@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38319
https://lore.kernel.org/linux-cve-announce/2025071016-CVE-2025-38319-de26@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38320
https://lore.kernel.org/linux-cve-announce/2025071029-CVE-2025-38320-4e71@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38321
https://lore.kernel.org/linux-cve-announce/2025071031-CVE-2025-38321-25aa@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38322
https://lore.kernel.org/linux-cve-announce/2025071031-CVE-2025-38322-810a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38323
https://lore.kernel.org/linux-cve-announce/2025071032-CVE-2025-38323-840c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38324
https://lore.kernel.org/linux-cve-announce/2025071032-CVE-2025-38324-1d1d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38325
https://lore.kernel.org/linux-cve-announce/2025071032-CVE-2025-38325-9f7c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38326
https://lore.kernel.org/linux-cve-announce/2025071032-CVE-2025-38326-6186@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38327
https://lore.kernel.org/linux-cve-announce/2025071032-CVE-2025-38327-67ca@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38328
https://lore.kernel.org/linux-cve-announce/2025071032-CVE-2025-38328-43bf@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38329
https://lore.kernel.org/linux-cve-announce/2025071033-CVE-2025-38329-b96c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38330
https://lore.kernel.org/linux-cve-announce/2025071033-CVE-2025-38330-bc1d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38331
https://lore.kernel.org/linux-cve-announce/2025071033-CVE-2025-38331-aad6@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38332
https://lore.kernel.org/linux-cve-announce/2025071033-CVE-2025-38332-9590@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38333
https://lore.kernel.org/linux-cve-announce/2025071033-CVE-2025-38333-a60d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38334
https://lore.kernel.org/linux-cve-announce/2025071033-CVE-2025-38334-0d45@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38335
https://lore.kernel.org/linux-cve-announce/2025071034-CVE-2025-38335-b96e@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38336
https://lore.kernel.org/linux-cve-announce/2025071034-CVE-2025-38336-ab73@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38337
https://lore.kernel.org/linux-cve-announce/2025071034-CVE-2025-38337-6673@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38338
https://lore.kernel.org/linux-cve-announce/2025071034-CVE-2025-38338-6aa1@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38339
https://lore.kernel.org/linux-cve-announce/2025071034-CVE-2025-38339-90f8@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38340
https://lore.kernel.org/linux-cve-announce/2025071034-CVE-2025-38340-bd10@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38341
https://lore.kernel.org/linux-cve-announce/2025071035-CVE-2025-38341-7446@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38342
https://lore.kernel.org/linux-cve-announce/2025071035-CVE-2025-38342-9e31@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38343
https://lore.kernel.org/linux-cve-announce/2025071035-CVE-2025-38343-9a3b@gregkh/