Summary
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder andere nicht spezifizierte Angriffe durchzuführen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 115
-
Critical 10.0
bus: mhi: ep: Update read pointer only after buffer is written
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhi_ep_ring_add_element, the read pointer (rd_offset) is updated before the buffer is written, potentially causing race c…
-
Critical 9.8
netfs: Fix double put of request
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during the pause loop, it will have the ref that belongs to the IN_PROGRESS flag removed at that point - however, if it then goes …
-
Critical 9.8
nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request If the request being processed is not a v4 compound request, then examining the cstate can have undefined results. This p…
-
Critical 9.8
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT When transmitting an XDP_REDIRECT packet, call dma_unmap_len_set() with the proper length instead of 0. This bug triggers this warning on…
-
Critical 9.1
btrfs: fix a race between renames and directory logging
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a race between renames and directory logging We have a race between a rename and directory inode logging that if it happens and we crash/power fail before the rename completes, the…
-
High 8.8
LoongArch: KVM: Avoid overflow with array index
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Avoid overflow with array index The variable index is modified and reused as array index when modify register EIOINTC_ENABLE. There will be array index overflow problem.
-
High 8.8
rose: fix dangling neighbour pointers in rose_rt_device_down()
In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rose_rt_device_down() There are two bugs in rose_rt_device_down() that can cause use-after-free: 1. The loop bound `t->count` is modified within the l…
-
High 8.8
ksmbd: fix potential use-after-free in oplock/lease break ack
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbd_iov_pin_rsp return error, use-after-free can happen by accessing opinfo->state and opinfo_put and ksmbd_fd_put could cal…
-
High 8.4
virtio-net: ensure the received length does not exceed allocated size
In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_page, when reading the following buffers from the ring, we forget to check the received length with the …
-
High 8.4
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to hold an array of 'gpio_desc' pointers. But the memory is allocated for only one pointer. This w…
-
High 7.8
fuse: fix runtime warning on truncate_folio_batch_exceptionals()
In the Linux kernel, the following vulnerability has been resolved: fuse: fix runtime warning on truncate_folio_batch_exceptionals() The WARN_ON_ONCE is introduced on truncate_folio_batch_exceptionals() to capture whether the filesystem has removed all DAX en…
-
High 7.8
LoongArch: KVM: Check validity of "num_cpu" from user space
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check validity of "num_cpu" from user space The maximum supported cpu number is EIOINTC_ROUTE_MAX_VCPUS about irqchip EIOINTC, here add validation about cpu number to avoid ar…
-
High 7.8
RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling __xa_store() and __xa_erase() were used without holding the proper lock, which led to a lockdep warning due to unsafe RCU usage. T…
-
High 7.8
btrfs: fix iteration of extrefs during log replay
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix iteration of extrefs during log replay At __inode_add_ref() when processing extrefs, if we jump into the next label we have an undefined value of victim_name.len, since we haven't …
-
High 7.8
ACPICA: Refuse to evaluate a method if arguments are missing
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platform firmware update that increased the number of method parameters and forgot to update a least one of …
-
High 7.8
fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
In the Linux kernel, the following vulnerability has been resolved: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass Export anon_inode_make_secure_inode() to allow KVM guest_memfd to create anonymous inodes with proper security context. …
-
High 7.8
spi: spi-qpic-snand: reallocate BAM transactions
In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: reallocate BAM transactions Using the mtd_nandbiterrs module for testing the driver occasionally results in weird things like below. 1. swiotlb mapping fails with the fol…
-
High 7.8
mtk-sd: Prevent memory corruption from DMA map failure
In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to map the DMA region, the request is not prepared for data receiving, but msdc_start_data() proceeds the D…
-
High 7.8
genirq/irq_sim: Initialize work context pointers properly
In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers properly Initialize `ops` member's pointers properly by using kzalloc() instead of kmalloc() when allocating the simulation work context. Othe…
-
High 7.8
platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their c…
-
High 7.8
NFC: nci: uart: Set tty->disc_data only in success path
In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty->disc_data only in success path Setting tty->disc_data before opening the NCI device means we need to clean it up on error paths. This also opens some short window if …
-
High 7.8
platform/x86/amd: pmf: Use device managed allocations
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmf: Use device managed allocations If setting up smart PC fails for any reason then this can lead to a double free when unloading amd-pmf. This is because dev->buf was free…
-
High 7.8
net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices Maximum OTP and EEPROM size for hearthstone PCI1xxxx devices are 8 Kb and 64 Kb respectively. Adjust max size definitions and…
-
High 7.8
perf: Fix sample vs do_exit()
In the Linux kernel, the following vulnerability has been resolved: perf: Fix sample vs do_exit() Baisheng Gao reported an ARM64 crash, which Mark decoded as being a synchronous external abort -- most likely due to trying to access MMIO in bad ways. The crash…
-
High 7.8
i2c: tegra: check msg length in SMBUS block read
In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read For SMBUS block read, do not continue to read if the message length passed from the device is '0' or greater than the maximum allowed bytes.
-
High 7.8
Revert "riscv: Define TASK_SIZE_MAX for __access_ok()"
In the Linux kernel, the following vulnerability has been resolved: Revert "riscv: Define TASK_SIZE_MAX for __access_ok()" This reverts commit ad5643cf2f69 ("riscv: Define TASK_SIZE_MAX for __access_ok()"). This commit changes TASK_SIZE_MAX to be LONG_MAX to …
-
High 7.8
riscv: vector: Fix context save/restore with xtheadvector
In the Linux kernel, the following vulnerability has been resolved: riscv: vector: Fix context save/restore with xtheadvector Previously only v0-v7 were correctly saved/restored, and the context of v8-v31 are damanged. Correctly save/restore v8-v31 to avoid b…
-
High 7.8
net/mlx5e: Fix race between DIM disable and net_dim()
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race between DIM disable and net_dim() There's a race between disabling DIM and NAPI callbacks using the dim pointer on the RQ or SQ. If NAPI checks the DIM state bit and sees …
-
High 7.8
mm/rmap: fix potential out-of-bounds page table access during batched unmap
In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix potential out-of-bounds page table access during batched unmap As pointed out by David[1], the batched unmap logic in try_to_unmap_one() may read past the end of a PTE table when…
-
High 7.8
drm/gem: Acquire references on GEM handles for framebuffers
In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer. This leads to the release of the dma-buf…
-
High 7.8
io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU
In the Linux kernel, the following vulnerability has been resolved: io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU syzbot reports that defer/local task_work adding via msg_ring can hit a request that has been freed: CPU: 1 UID: 0 PID: 19356 Co…
-
High 7.8
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight Reject migration of SEV{-ES} state if either the source or destination VM is actively creating a vCPU, i.e. if kvm…
-
High 7.8
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() The "intf" list iterator is an invalid pointer if the correct "intf->intf_num" is not found. Calling atomic_dec(&intf->n…
-
High 7.8
tcp: Correct signedness in skb remaining space calculation
In the Linux kernel, the following vulnerability has been resolved: tcp: Correct signedness in skb remaining space calculation Syzkaller reported a bug [1] where sk->sk_forward_alloc can overflow. When we send data, if an skb exists at the tail of the write q…
-
High 7.8
tipc: Fix use-after-free in tipc_conn_close().
In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipc_conn_close(). syzbot reported a null-ptr-deref in tipc_conn_close() during netns dismantle. [0] tipc_topsrv_stop() iterates tipc_net(net)->topsrv->conn_idr an…
-
High 7.8
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
In the Linux kernel, the following vulnerability has been resolved: perf: Revert to requiring CAP_SYS_ADMIN for uprobes Jann reports that uprobes can be used destructively when used in the middle of an instruction. The kernel only verifies there is a valid in…
-
High 7.7
virtio-net: xsk: rx: fix the frame's length check
In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame's length check When calling buf_to_xdp, the len argument is the frame data's length without virtio header's length (vi->hdr_len). We check that len with xsk…
-
High 7.5
smb: client: fix warning when reconnecting channel
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning when reconnecting channel When reconnecting a channel in smb2_reconnect_server(), a dummy tcon is passed down to smb2_reconnect() with ->query_interface uninitialized…
-
High 7.5
NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN We found a few different systems hung up in writeback waiting on the same page lock, and one task waiting on the NFS_LAYOUT_DRAIN bit in pnf…
-
High 7.5
scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() The function core_scsi3_decode_spec_i_port(), in its error code path, unconditionally calls core_scsi3_lunacl_und…
-
High 7.5
nvmet: fix memory leak of bio integrity
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet receives commands with metadata there is a continuous memory leak of kmalloc-128 slab or more precisely bio->bi_integrity. Since commit bf4c89…
-
High 7.3
clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data
In the Linux kernel, the following vulnerability has been resolved: clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data When num_parents is 4, __clk_register() occurs an out-of-bounds when accessing parent_names member. Use ARRAY_SIZE() instead …
-
High 7.0
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix potential null-ptr-deref in to_atmarpd(). atmarpd is protected by RTNL since commit f3a0592b37b8 ("[ATM]: clip causes unregister hang"). However, it is not enough because to_at…
-
High 7.0
vsock: Fix transport_* TOCTOU
In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with module unload. Protect new_transport from becoming a stale pointer. This also takes care of an insecure call in vsock_use_loca…
-
Unscored —
drm/xe: Fix taking invalid lock on wedge
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix taking invalid lock on wedge If device wedges on e.g. GuC upload, the submission is not yet enabled and the state is not even initialized. Protect the wedge call so it does nothin…
-
Unscored —
drm/msm/gpu: Fix crash when throttling GPU immediately during boot
In the Linux kernel, the following vulnerability has been resolved: drm/msm/gpu: Fix crash when throttling GPU immediately during boot There is a small chance that the GPU is already hot during boot. In that case, the call to of_devfreq_cooling_register() wil…
-
Unscored —
drm/xe: Process deferred GGTT node removals on device unwind
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Process deferred GGTT node removals on device unwind While we are indirectly draining our dedicated workqueue ggtt->wq that we use to complete asynchronous removal of some GGTT nodes,…
-
Unscored —
drm/xe/guc: Explicitly exit CT safe mode on unwind
In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Explicitly exit CT safe mode on unwind During driver probe we might be briefly using CT safe mode, which is based on a delayed work, but usually we are able to stop this once we h…
-
Unscored —
btrfs: fix race between async reclaim worker and close_ctree()
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between async reclaim worker and close_ctree() Syzbot reported an assertion failure due to an attempt to add a delayed iput after we have set BTRFS_FS_STATE_NO_DELAYED_IPUT in…
-
Unscored —
s390/mm: Fix in_atomic() handling in do_secure_storage_access()
In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix in_atomic() handling in do_secure_storage_access() Kernel user spaces accesses to not exported pages in atomic context incorrectly try to resolve the page fault. With debug optio…
-
Unscored —
drm/amd/display: Add more checks for DSC / HUBP ONO guarantees
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees [WHY] For non-zero DSC instances it's possible that the HUBP domain required to drive it for sequential ONO ASICs isn't met, pot…
-
Unscored —
drm/amd/display: Check dce_hwseq before dereferencing it
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check dce_hwseq before dereferencing it [WHAT] hws was checked for null earlier in dce110_blank_stream, indicating hws can be null, and should be checked whenever it is used.…
-
Unscored —
drm/amd/display: Add null pointer check for get_first_active_display()
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for get_first_active_display() The function mod_hdcp_hdcp1_enable_encryption() calls the function get_first_active_display(), but does not check its re…
-
Unscored —
drm/tegra: Fix a possible null pointer dereference
In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix a possible null pointer dereference In tegra_crtc_reset(), new memory is allocated with kzalloc(), but no check is performed. Before calling __drm_atomic_helper_crtc_reset, sta…
-
Unscored —
maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() Temporarily clear the preallocation flag when explicitly requesting allocations. Pre-existing allocations are already counted again…
-
Unscored —
misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
In the Linux kernel, the following vulnerability has been resolved: misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() The returned value, pfsm->miscdev.name, from devm_kasprintf() could be NULL. A pointer check is added to prevent potential N…
-
Unscored —
dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or eve…
-
Unscored —
btrfs: fix failure to rebuild free space tree using multiple transactions
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix failure to rebuild free space tree using multiple transactions If we are rebuilding a free space tree, while modifying the free space tree we may need to allocate a new metadata bl…
-
Unscored —
drm/v3d: Disable interrupts before resetting the GPU
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Disable interrupts before resetting the GPU Currently, an interrupt can be triggered during a GPU reset, which can lead to GPU hangs and NULL pointer dereference in an interrupt cont…
-
Unscored —
IB/mlx5: Fix potential deadlock in MR deregistration
In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix potential deadlock in MR deregistration The issue arises when kzalloc() is invoked while holding umem_mutex or any other lock acquired under umem_mutex. This is problematic becau…
-
Unscored —
optee: ffa: fix sleep in atomic context
In the Linux kernel, the following vulnerability has been resolved: optee: ffa: fix sleep in atomic context The OP-TEE driver registers the function notif_callback() for FF-A notifications. However, this function is called in an atomic context leading to erro…
-
Unscored —
usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume Shawn and John reported a hang issue during system suspend as below: - USB gadget is enabled as Ethernet - There is d…
-
Unscored —
HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe
In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe In probe appletb_kbd_probe() a "struct appletb_kbd *kbd" is allocated via devm_kzalloc() to store touch bar keyboard related…
-
Unscored —CVE-2025-38380 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()
In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() The cs40l50_upload_owt() function allocates memory via kmalloc() without checking for allocation failure, which c…
-
Unscored —
mm/vmalloc: fix data race in show_numa_info()
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix data race in show_numa_info() The following data-race was found in show_numa_info(): ================================================================== BUG: KCSAN: data-race i…
-
Unscored —
mtd: spinand: fix memory leak of ECC engine conf
In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix memory leak of ECC engine conf Memory allocated for the ECC engine conf is not released during spinand cleanup. Below kmemleak trace is seen for this memory leak: unreferenc…
-
Unscored —
net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect Remove redundant netif_napi_del() call from disconnect path. A WARN may be triggered in __netif_napi_del_locked() during U…
-
Unscored —
RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert The obj_event may be loaded immediately after inserted, then if the list_head is not initialized then we may get a poisonous poi…
-
Unscored —
firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context The current use of a mutex to protect the notifier hashtable accesses can lead to issues in the atomic context. I…
-
Unscored —
drm/i915/gt: Fix timeline left held on VMA alloc error
In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix timeline left held on VMA alloc error The following error has been reported sporadically by CI when a test unbinds the i915 driver on a ring submission platform: <4> [239.330…
-
Unscored —
firmware: arm_ffa: Fix memory leak by freeing notifier callback node
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix memory leak by freeing notifier callback node Commit e0573444edbf ("firmware: arm_ffa: Add interfaces to request notification callbacks") adds support for notifier call…
-
Unscored —
usb: typec: altmodes/displayport: do not index invalid pin_assignments
In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pin_assignments A poorly implemented DisplayPort Alt Mode port partner can indicate that its pin assignment capabilities are greater tha…
-
Unscored —
idpf: convert control queue mutex to a spinlock
In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2_CAP_MACFILTER enabled, the following warning is generated on module load: [ 324.701677] BUG: sleeping function called from inval…
-
Unscored —
HID: appletb-kbd: fix memory corruption of input_handler_list
In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix memory corruption of input_handler_list In appletb_kbd_probe an input handler is initialised and then registered with input core through input_register_handler(). When t…
-
Unscored —
nvme-multipath: fix suspicious RCU usage warning
In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in virtme-ng, I get the following "suspicious RCU usage" warning in nvme_mpath_add_sysfs_link(): ''' [ 5.024…
-
Unscored —
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. syzbot reported a warning below [1] following a fault injection in nfs_fs_proc_net_init(). [0] When nfs_fs_proc_net_init() f…
-
Unscored —
idpf: return 0 size for RSS key if not supported
In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported Returning -EOPNOTSUPP from function returning u32 is leading to cast and invalid size value as a result. -EOPNOTSUPP as a size probably will l…
-
Unscored —
vsock/vmci: Clear the vmci transport packet properly when initializing it
In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transport_packet_init memset the vmci_transport_packet before populating the fields to avoid any uninitialise…
-
Unscored —
usb: typec: displayport: Fix potential deadlock
In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock The deadlock can occur due to a recursive lock acquisition of `cros_typec_altmode_data::mutex`. The call chain is as follows: 1. cros_typec_alt…
-
Unscored —
wifi: ath6kl: remove WARN on bad firmware input
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives bad input, that's nothing to do with the driver's stack at this point etc., so the WARN_ON() doesn't add any value. Addit…
-
Unscored —
riscv: cpu_ops_sbi: Use static array for boot_data
In the Linux kernel, the following vulnerability has been resolved: riscv: cpu_ops_sbi: Use static array for boot_data Since commit 6b9f29b81b15 ("riscv: Enable pcpu page first chunk allocator"), if NUMA is enabled, the page percpu allocator may be used on ve…
-
Unscored —
drm/msm: Fix another leak in the submit error path
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path put_unused_fd() doesn't free the installed file, if we've already done fd_install(). So we need to also free the sync_file. Patchwork: https…
-
Unscored —
drm/msm: Fix a fence leak in submit error path
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix a fence leak in submit error path In error paths, we could unref the submit without calling drm_sched_entity_push_job(), so msm_job_free() will never get called. Since drm_sched_…
-
Unscored —
wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 GCC_GCC_PCIE_HOT_RST is wrongly defined for WCN7850, causing kernel crash on some specific platforms. Since this register is dive…
-
Unscored —
Squashfs: check return result of sb_min_blocksize
In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN: shift-out-of-bounds in squashfs_bio_read" bug. Syzkaller forks multiple processes which after mounting the Squas…
-
Unscored —
ice: fix eswitch code memory leak in reset scenario
In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. …
-
Unscored —
remoteproc: core: Release rproc->clean_table after rproc_attach() fails
In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc->clean_table after rproc_attach() fails When rproc->state = RPROC_DETACHED is attached to remote processor through rproc_attach(), if rproc_handle_resources() …
-
Unscored —
remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()
In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() When rproc->state = RPROC_DETACHED and rproc_attach() is used to attach to the remote proces…
-
Unscored —
wifi: carl9170: do not ping device which has failed to load firmware
In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: do not ping device which has failed to load firmware Syzkaller reports [1, 2] crashes caused by an attempts to ping the device which has failed to load firmware. Since such a …
-
Unscored —
ASoC: codecs: wcd9375: Fix double free of regulator supplies
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9375: Fix double free of regulator supplies Driver gets regulator supplies in probe path with devm_regulator_bulk_get(), so should not call regulator_bulk_free() in error and…
-
Unscored —
drm/amdgpu: Add basic validation for RAS header
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add basic validation for RAS header If RAS header read from EEPROM is corrupted, it could result in trying to allocate huge memory for reading the records. Add some validation to …
-
Unscored —
video: screen_info: Relocate framebuffers behind PCI bridges
In the Linux kernel, the following vulnerability has been resolved: video: screen_info: Relocate framebuffers behind PCI bridges Apply PCI host-bridge window offsets to screen_info framebuffers. Fixes invalid access to I/O memory. Resources behind a PCI host …
-
Unscored —
Input: ims-pcu - check record size in ims_pcu_flash_firmware()
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - check record size in ims_pcu_flash_firmware() The "len" variable comes from the firmware and we generally do trust firmware, but it's always better to double check. If the "l…
-
Unscored —
smb: client: fix regression with native SMB symlinks
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix regression with native SMB symlinks Some users and customers reported that their backup/copy tools started to fail when the directory being copied contained symlink targets t…
-
Unscored —
net: netpoll: Initialize UDP checksum field before checksumming
In the Linux kernel, the following vulnerability has been resolved: net: netpoll: Initialize UDP checksum field before checksumming commit f1fce08e63fe ("netpoll: Eliminate redundant assignment") removed the initialization of the UDP checksum, which was wrong…
-
Unscored —
riscv: fix runtime constant support for nommu kernels
In the Linux kernel, the following vulnerability has been resolved: riscv: fix runtime constant support for nommu kernels the `__runtime_fixup_32` function does not handle the case where `val` is zero correctly (as might occur when patching a nommu kernel and…
-
Unscored —
drm/scheduler: signal scheduled fence when kill job
In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job When an entity from application B is killed, drm_sched_entity_kill() removes all jobs belonging to that entity through drm_sched_entity_kil…
-
Unscored —
ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. sof_pdata->tplg_filename can have address allocated by kstrdup() and can be overwritten. Memory leak was detected with kmemleak: un…
-
Unscored —
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() syzbot found a potential access to uninit-value in nf_flow_pppoe_proto() Blamed commit forgot the Ethernet header. B…
-
Unscored —
block: reject bs > ps block devices when THP is disabled
In the Linux kernel, the following vulnerability has been resolved: block: reject bs > ps block devices when THP is disabled If THP is disabled and when a block device with logical block size > page size is present, the following null ptr deref panic happens …
-
Unscored —
nbd: fix uaf in nbd_genl_connect() error path
In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_genl_connect() error path There is a use-after-free issue in nbd: block nbd6: Receive control failed (result -104) block nbd6: shutting down sockets ======================…
-
Unscored —
raid10: cleanup memleak at raid10_make_request
In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10_make_request If raid10_read_request or raid10_write_request registers a new request and the REQ_NOWAIT flag is set, the code does not free the malloc from th…
-
Unscored —
md/raid1: Fix stack memory use after return in raid1_reshape
In the Linux kernel, the following vulnerability has been resolved: md/raid1: Fix stack memory use after return in raid1_reshape In the raid1_reshape function, newpool is allocated on the stack and assigned to conf->r1bio_pool. This results in conf->r1bio_poo…
-
Unscored —
usb: gadget: u_serial: Fix race condition in TTY wakeup
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix race condition in TTY wakeup A race condition occurs when gs_start_io() calls either gs_start_rx() or gs_start_tx(), as those functions briefly drop the port_lock f…
-
Unscored —
wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload()
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload() Add a NULL check for msta->vif before accessing its members to prevent a kernel panic in AP mode deploym…
-
Unscored —
md/md-bitmap: fix GPF in bitmap_get_stats()
In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix GPF in bitmap_get_stats() The commit message of commit 6ec1f0239485 ("md/md-bitmap: fix stats collection for external bitmaps") states: Remove the external bitmap check as t…
-
Unscored —
net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe()
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe() Add check for the return value of rcar_gen4_ptp_alloc() to prevent potential null pointer dereference.
-
Unscored —
ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp()
In the Linux kernel, the following vulnerability has been resolved: ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp() Use pr_warn() instead of dev_warn() when 'pdev' is NULL to avoid a potential NULL pointer dereference.
-
Unscored —
net/sched: Abort __tc_modify_qdisc if parent class does not exist
In the Linux kernel, the following vulnerability has been resolved: net/sched: Abort __tc_modify_qdisc if parent class does not exist Lion's patch [1] revealed an ancient bug in the qdisc API. Whenever a user creates/modifies a qdisc specifying as a parent an…
-
Unscored —
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix NULL pointer dereference in vcc_sendmsg() atmarpd_dev_ops does not implement the send method, which may cause crash as bellow. BUG: kernel NULL pointer dereference, address: 00…
-
Unscored —
atm: clip: Fix infinite recursive call of clip_push().
In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix infinite recursive call of clip_push(). syzbot reported the splat below. [0] This happens if we call ioctl(ATMARP_MKIP) more than once. During the first call, clip_mkip() sets …
-
Unscored —
vsock: Fix transport_{g2h,h2g} TOCTOU
In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_{g2h,h2g} TOCTOU vsock_find_cid() and vsock_dev_do_ioctl() may race with module unload. transport_{g2h,h2g} may become NULL after the NULL check. Introduce vsock_transpor…
-
Unscored —
netlink: Fix wraparounds of sk->sk_rmem_alloc.
In the Linux kernel, the following vulnerability has been resolved: netlink: Fix wraparounds of sk->sk_rmem_alloc. Netlink has this pattern in some places if (atomic_read(&sk->sk_rmem_alloc) > sk->sk_rcvbuf) atomic_add(skb->truesize, &sk->sk_rmem_alloc); , wh…
-
Unscored —
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
In the Linux kernel, the following vulnerability has been resolved: drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling If there's support for another console device (such as a TTY serial), the kernel occasionally panics during boot. The panic mes…
Revision history
-
#132
Neue Updates von Debian aufgenommen
-
#131
Neue Updates von Ubuntu aufgenommen
-
#130
Neue Updates von Debian aufgenommen
-
#129
Neue Updates von Ubuntu aufgenommen
-
#128
Neue Updates von IBM aufgenommen
-
#127
Neue Updates von Red Hat aufgenommen
-
#126
Neue Updates von Ubuntu aufgenommen
-
#125
Neue Updates von Ubuntu aufgenommen
-
#124
Neue Updates von Ubuntu aufgenommen
-
#123
Neue Updates von IBM aufgenommen
-
#122
Neue Updates von Ubuntu aufgenommen
-
#121
Neue Updates von Oracle Linux aufgenommen
-
#120
Neue Updates von Oracle Linux aufgenommen
-
#119
Neue Updates von Oracle Linux aufgenommen
-
#118
Neue Updates von Oracle Linux aufgenommen
-
#117
Neue Updates von Red Hat aufgenommen
-
#116
Neue Updates von Ubuntu aufgenommen
-
#115
Neue Updates von Oracle Linux aufgenommen
-
#114
Neue Updates von Dell und Ubuntu aufgenommen
-
#113
Neue Updates von SUSE aufgenommen
-
#112
Neue Updates von SUSE aufgenommen
-
#111
Neue Updates von SUSE aufgenommen
-
#110
Neue Updates von SUSE aufgenommen
-
#109
Neue Updates von Debian aufgenommen
-
#108
Neue Updates von Ubuntu aufgenommen
References
-
Kernel CVE Announce Mailingliste
https://lore.kernel.org/linux-cve-announce/
-
Linux Kernel CVE Announcement CVE-2025-38353
https://lore.kernel.org/linux-cve-announce/2025072553-CVE-2025-38353-a9eb@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38354
https://lore.kernel.org/linux-cve-announce/2025072555-CVE-2025-38354-bdcd@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38355
https://lore.kernel.org/linux-cve-announce/2025072555-CVE-2025-38355-2855@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38356
https://lore.kernel.org/linux-cve-announce/2025072555-CVE-2025-38356-286a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38357
https://lore.kernel.org/linux-cve-announce/2025072556-CVE-2025-38357-8b0a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38358
https://lore.kernel.org/linux-cve-announce/2025072556-CVE-2025-38358-8d7f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38359
https://lore.kernel.org/linux-cve-announce/2025072556-CVE-2025-38359-8cda@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38360
https://lore.kernel.org/linux-cve-announce/2025072557-CVE-2025-38360-1f17@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38361
https://lore.kernel.org/linux-cve-announce/2025072557-CVE-2025-38361-3f11@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38362
https://lore.kernel.org/linux-cve-announce/2025072557-CVE-2025-38362-8922@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38363
https://lore.kernel.org/linux-cve-announce/2025072557-CVE-2025-38363-122c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38364
https://lore.kernel.org/linux-cve-announce/2025072558-CVE-2025-38364-74db@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38365
https://lore.kernel.org/linux-cve-announce/2025072558-CVE-2025-38365-0519@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38366
https://lore.kernel.org/linux-cve-announce/2025072558-CVE-2025-38366-26b8@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38367
https://lore.kernel.org/linux-cve-announce/2025072558-CVE-2025-38367-df91@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38368
https://lore.kernel.org/linux-cve-announce/2025072559-CVE-2025-38368-e561@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38369
https://lore.kernel.org/linux-cve-announce/2025072559-CVE-2025-38369-6ddf@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38370
https://lore.kernel.org/linux-cve-announce/2025072502-CVE-2025-38370-857d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38371
https://lore.kernel.org/linux-cve-announce/2025072502-CVE-2025-38371-ff41@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38372
https://lore.kernel.org/linux-cve-announce/2025072503-CVE-2025-38372-6659@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38373
https://lore.kernel.org/linux-cve-announce/2025072503-CVE-2025-38373-b6fa@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38374
https://lore.kernel.org/linux-cve-announce/2025072503-CVE-2025-38374-52a8@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38375
https://lore.kernel.org/linux-cve-announce/2025072503-CVE-2025-38375-3faa@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38376
https://lore.kernel.org/linux-cve-announce/2025072504-CVE-2025-38376-e290@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38377
https://lore.kernel.org/linux-cve-announce/2025072504-CVE-2025-38377-a0c0@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38378
https://lore.kernel.org/linux-cve-announce/2025072504-CVE-2025-38378-4e10@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38379
https://lore.kernel.org/linux-cve-announce/2025072505-CVE-2025-38379-97db@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38380
https://lore.kernel.org/linux-cve-announce/2025072505-CVE-2025-38380-d1a9@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38381
https://lore.kernel.org/linux-cve-announce/2025072505-CVE-2025-38381-b27a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38382
https://lore.kernel.org/linux-cve-announce/2025072505-CVE-2025-38382-c4f2@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38383
https://lore.kernel.org/linux-cve-announce/2025072506-CVE-2025-38383-c967@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38384
https://lore.kernel.org/linux-cve-announce/2025072506-CVE-2025-38384-391e@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38385
https://lore.kernel.org/linux-cve-announce/2025072506-CVE-2025-38385-936c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38386
https://lore.kernel.org/linux-cve-announce/2025072506-CVE-2025-38386-0a8a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38387
https://lore.kernel.org/linux-cve-announce/2025072507-CVE-2025-38387-f9d4@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38388
https://lore.kernel.org/linux-cve-announce/2025072507-CVE-2025-38388-402a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38389
https://lore.kernel.org/linux-cve-announce/2025072507-CVE-2025-38389-b1f4@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38390
https://lore.kernel.org/linux-cve-announce/2025072508-CVE-2025-38390-7d67@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38391
https://lore.kernel.org/linux-cve-announce/2025072508-CVE-2025-38391-0064@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38392
https://lore.kernel.org/linux-cve-announce/2025072508-CVE-2025-38392-17a6@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38393
https://lore.kernel.org/linux-cve-announce/2025072508-CVE-2025-38393-f2e8@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38394
https://lore.kernel.org/linux-cve-announce/2025072509-CVE-2025-38394-f005@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38395
https://lore.kernel.org/linux-cve-announce/2025072509-CVE-2025-38395-3a19@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38396
https://lore.kernel.org/linux-cve-announce/2025072509-CVE-2025-38396-92a5@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38397
https://lore.kernel.org/linux-cve-announce/2025072509-CVE-2025-38397-d375@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38398
https://lore.kernel.org/linux-cve-announce/2025072510-CVE-2025-38398-1271@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38399
https://lore.kernel.org/linux-cve-announce/2025072510-CVE-2025-38399-00ec@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38400
https://lore.kernel.org/linux-cve-announce/2025072510-CVE-2025-38400-a0d2@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38401
https://lore.kernel.org/linux-cve-announce/2025072510-CVE-2025-38401-789b@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38402
https://lore.kernel.org/linux-cve-announce/2025072511-CVE-2025-38402-e08c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38403
https://lore.kernel.org/linux-cve-announce/2025072504-CVE-2025-38403-0da0@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38404
https://lore.kernel.org/linux-cve-announce/2025072521-CVE-2025-38404-f719@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38405
https://lore.kernel.org/linux-cve-announce/2025072511-CVE-2025-38405-014e@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38406
https://lore.kernel.org/linux-cve-announce/2025072533-CVE-2025-38406-5f5c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38407
https://lore.kernel.org/linux-cve-announce/2025072520-CVE-2025-38407-98b5@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38408
https://lore.kernel.org/linux-cve-announce/2025072520-CVE-2025-38408-29e7@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38409
https://lore.kernel.org/linux-cve-announce/2025072520-CVE-2025-38409-cee4@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38410
https://lore.kernel.org/linux-cve-announce/2025072521-CVE-2025-38410-e0e7@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38411
https://lore.kernel.org/linux-cve-announce/2025072521-CVE-2025-38411-0ca7@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38412
https://lore.kernel.org/linux-cve-announce/2025072521-CVE-2025-38412-2ccc@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38413
https://lore.kernel.org/linux-cve-announce/2025072521-CVE-2025-38413-d64f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38414
https://lore.kernel.org/linux-cve-announce/2025072512-CVE-2025-38414-8302@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38415
https://lore.kernel.org/linux-cve-announce/2025072513-CVE-2025-38415-c634@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38416
https://lore.kernel.org/linux-cve-announce/2025072511-CVE-2025-38416-e4bb@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38417
https://lore.kernel.org/linux-cve-announce/2025072546-CVE-2025-38417-12d4@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38418
https://lore.kernel.org/linux-cve-announce/2025072546-CVE-2025-38418-7af0@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38419
https://lore.kernel.org/linux-cve-announce/2025072546-CVE-2025-38419-c07e@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38420
https://lore.kernel.org/linux-cve-announce/2025072552-CVE-2025-38420-13a5@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38421
https://lore.kernel.org/linux-cve-announce/2025072554-CVE-2025-38421-8601@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38422
https://lore.kernel.org/linux-cve-announce/2025072554-CVE-2025-38422-5d9b@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38423
https://lore.kernel.org/linux-cve-announce/2025072554-CVE-2025-38423-171a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38424
https://lore.kernel.org/linux-cve-announce/2025072555-CVE-2025-38424-500e@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38425
https://lore.kernel.org/linux-cve-announce/2025072555-CVE-2025-38425-d34f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38426
https://lore.kernel.org/linux-cve-announce/2025072555-CVE-2025-38426-718c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38427
https://lore.kernel.org/linux-cve-announce/2025072555-CVE-2025-38427-6e37@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38428
https://lore.kernel.org/linux-cve-announce/2025072556-CVE-2025-38428-8b33@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38429
https://lore.kernel.org/linux-cve-announce/2025072556-CVE-2025-38429-f662@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38430
https://lore.kernel.org/linux-cve-announce/2025072556-CVE-2025-38430-dafd@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-38431
https://lore.kernel.org/linux-cve-announce/2025072537-CVE-2025-38431-9bb6@gregkh/