Skip to content
OpenAdvisories
High WID-SEC-2025-2350 12 CVEs

Linux Kernel: Mehrere Schwachstellen

Published Oct 20, 2025 · Updated Sep 21, 2026 · Revision 51 · de-DE

Vendor: Debian Vendor: Dell Vendor: Oracle Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Linux Product: Linux Product: Linux Product: Linux Product: NetWorker Product: openSUSE Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere, nicht näher bezeichnete Angriffe durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 12

  • High 7.8
    CVE-2025-40006

    mm/hugetlb: fix folio is still mapped when deleted

    In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole. remove_inode_single_folio will unmap the folio if the folio is still mapped. However, it's cal…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-40012

    net/smc: fix warning in smc_rx_splice() when calling get_page()

    In the Linux kernel, the following vulnerability has been resolved: net/smc: fix warning in smc_rx_splice() when calling get_page() smc_lo_register_dmb() allocates DMB buffers with kzalloc(), which are later passed to get_page() in smc_rx_splice(). Since kmal…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40005

    spi: cadence-quadspi: Implement refcount to handle unbind during busy

    In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removal(unbind) operation. Howe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-40007

    netfs: fix reference leak

    In the Linux kernel, the following vulnerability has been resolved: netfs: fix reference leak Commit 20d72b00ca81 ("netfs: Fix the request's work item to not require a ref") modified netfs_alloc_request() to initialize the reference counter to 2 instead of 1.…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40008

    kmsan: fix out-of-bounds access to shadow memory

    In the Linux kernel, the following vulnerability has been resolved: kmsan: fix out-of-bounds access to shadow memory Running sha224_kunit on a KMSAN-enabled kernel results in a crash in kmsan_internal_set_shadow_origin(): BUG: unable to handle page fault for …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40009

    fs/proc/task_mmu: check p->vec_buf for NULL

    In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: check p->vec_buf for NULL When the PAGEMAP_SCAN ioctl is invoked with vec_len = 0 reaches pagemap_scan_backout_range(), kernel panics with null-ptr-deref: [ 44.936808] Oops:…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40010

    afs: Fix potential null pointer dereference in afs_put_server

    In the Linux kernel, the following vulnerability has been resolved: afs: Fix potential null pointer dereference in afs_put_server afs_put_server() accessed server->debug_id before the NULL check, which could lead to a null pointer dereference. Move the debug_…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40011

    drm/gma500: Fix null dereference in hdmi teardown

    In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix null dereference in hdmi teardown pci_set_drvdata sets the value of pdev->driver_data to NULL, after which the driver_data obtained from the same dev is dereferenced in oaktra…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40013

    ASoC: qcom: audioreach: fix potential null pointer dereference

    In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: audioreach: fix potential null pointer dereference It is possible that the topology parsing function audioreach_widget_load_module_common() could return NULL or an error pointer. …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40015

    media: stm32-csi: Fix dereference before NULL check

    In the Linux kernel, the following vulnerability has been resolved: media: stm32-csi: Fix dereference before NULL check In 'stm32_csi_start', 'csidev->s_subdev' is dereferenced directly while assigning a value to the 'src_pad'. However the same value is being…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40016

    media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID

    In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID Per UVC 1.1+ specification 3.7.2, units and terminals must have a non-zero unique ID. ``` Each Unit and Terminal within th…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-40017

    media: iris: Fix memory leak by freeing untracked persist buffer

    In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix memory leak by freeing untracked persist buffer One internal buffer which is allocated only once per session was not being freed during session close because it was not being…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Revision history

  1. #51

    Neue Updates von Ubuntu aufgenommen

  2. #50

    Neue Updates von Dell aufgenommen

  3. #49

    Neue Updates von Ubuntu aufgenommen

  4. #48

    Neue Updates von Ubuntu aufgenommen

  5. #47

    Neue Updates von Ubuntu aufgenommen

  6. #46

    Neue Updates von Ubuntu aufgenommen

  7. #45

    Neue Updates von Ubuntu aufgenommen

  8. #44

    Neue Updates von Ubuntu aufgenommen

  9. #43

    Neue Updates von Ubuntu aufgenommen

  10. #42

    Neue Updates von Ubuntu aufgenommen

  11. #41

    Neue Updates von Ubuntu aufgenommen

  12. #40

    Neue Updates von Ubuntu aufgenommen

  13. #39

    Neue Updates von Ubuntu aufgenommen

  14. #38

    Neue Updates von Ubuntu aufgenommen

  15. #37

    Neue Updates von Ubuntu aufgenommen

  16. #36

    Neue Updates von Debian aufgenommen

  17. #35

    Neue Updates von Ubuntu aufgenommen

  18. #34

    Neue Updates von Ubuntu aufgenommen

  19. #33

    Neue Updates von Ubuntu aufgenommen

  20. #32

    Neue Updates von SUSE aufgenommen

  21. #31

    Neue Updates von SUSE aufgenommen

  22. #30

    Neue Updates von Ubuntu aufgenommen

  23. #29

    Neue Updates von SUSE aufgenommen

  24. #28

    Neue Updates von Ubuntu aufgenommen

  25. #27

    Neue Updates von Ubuntu aufgenommen

References