Skip to content
OpenAdvisories
Medium WID-SEC-2025-2407 8 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service

Published Oct 26, 2025 · Updated Oct 14, 2026 · Revision 84 · de-DE

Vendor: amazon Vendor: Debian Vendor: Dell Vendor: Google Vendor: Oracle Vendor: Siemens Vendor: SUSE Vendor: Ubuntu Product: Cloud Platform Product: ECS Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: openSUSE Product: SIMATIC S7 Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 8

  • High 7.8
    CVE-2023-53733

    net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode

    In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode When u32_replace_hw_knode fails, we need to undo the tcf_bind_filter operation done at u32_set_parms.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-40018

    ipvs: Defer ip_vs_ftp unregister during netns cleanup

    In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp before connections with valid cp->app pointers are flushed, leadin…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-40024

    vhost: Take a reference on the task in struct vhost_task.

    In the Linux kernel, the following vulnerability has been resolved: vhost: Take a reference on the task in struct vhost_task. vhost_task_create() creates a task and keeps a reference to its task_struct. That task may exit early via a signal and its task_struc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-40019 Public exploit

    crypto: essiv - Check ssize for decryption and in-place encryption

    In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-40020

    can: peak_usb: fix shift-out-of-bounds issue

    In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix shift-out-of-bounds issue Explicitly uses a 64-bit constant when the number of bits used for its shifting is 32 (which is the case for PC CAN FD interfaces supported by thi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-40021

    tracing: dynevent: Add a missing lockdown check on dynevent

    In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamic_events interface on tracefs is compatible with kprobe_events and uprobe_events, it should also check the lockdown sta…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-40022

    crypto: af_alg - Fix incorrect boolean values in af_alg_ctx

    In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx Commit 1b34cbbf4f01 ("crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg") changed some fields from bool to 1-bit bitfie…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40023

    drm/xe/vf: Don't expose sysfs attributes not applicable for VFs

    In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't expose sysfs attributes not applicable for VFs VFs can't read BMG_PCIE_CAP(0x138340) register nor access PCODE (already guarded by the info.skip_pcode flag) so we shouldn't e…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Revision history

  1. #84

    Neue Updates von SUSE aufgenommen

  2. #83

    Neue Updates von SUSE aufgenommen

  3. #82

    Neue Updates von SUSE aufgenommen

  4. #81

    Neue Updates von SUSE aufgenommen

  5. #80

    Neue Updates von SUSE aufgenommen

  6. #79

    Neue Updates von SUSE aufgenommen

  7. #78

    Neue Updates von SUSE aufgenommen

  8. #77

    Neue Updates von SUSE aufgenommen

  9. #76

    Neue Updates von SUSE aufgenommen

  10. #75

    Neue Updates von Siemens aufgenommen

  11. #74

    Neue Updates von Dell aufgenommen

  12. #73

    Neue Updates von Ubuntu aufgenommen

  13. #72

    Neue Updates von Oracle Linux aufgenommen

  14. #71

    Neue Updates von Ubuntu aufgenommen

  15. #70

    Neue Updates von SUSE aufgenommen

  16. #69

    Neue Updates von SUSE aufgenommen

  17. #68

    Neue Updates von SUSE und Ubuntu aufgenommen

  18. #67

    Neue Updates von SUSE aufgenommen

  19. #66

    Neue Updates von Ubuntu und SUSE aufgenommen

  20. #65

    Neue Updates von SUSE aufgenommen

  21. #64

    Neue Updates von SUSE aufgenommen

  22. #63

    Neue Updates von Ubuntu aufgenommen

  23. #62

    Neue Updates von SUSE aufgenommen

  24. #61

    Neue Updates von SUSE aufgenommen

  25. #60

    Neue Updates von Ubuntu aufgenommen

References