Summary
Ein Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, die möglicherweise zu einer Denial-of-Service- Bedingung führen oder eine Speicherbeschädigung verursachen können.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 67
-
Critical 9.8
tls: wait for pending async decryptions if tls_strp_msg_hold fails
In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_msg_hold to create a clone of the input skb to hold references to the memory it uses. If we …
-
High 8.8
net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
In the Linux kernel, the following vulnerability has been resolved: net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast syzbot reported WARNING in rtl8150_start_xmit/usb_submit_urb. This is the sequence of events that leads to the warning: r…
-
High 8.1
mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable().
In the Linux kernel, the following vulnerability has been resolved: mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). mptcp_active_enable() is called from subflow_finish_connect(), which is icsk->icsk_af_ops->sk_rx_dst_set() and it's not a…
-
High 8.1
ipv6: use RCU in ip6_xmit()
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit() in order to use dst_dev_rcu() to prevent possible UAF.
-
High 8.1
ipv6: use RCU in ip6_output()
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_output() Use RCU in ip6_output() in order to use dst_dev_rcu() to prevent possible UAF. We can remove rcu_read_lock()/rcu_read_unlock() pairs from ip6_finish_output2().
-
High 8.1
smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().
In the Linux kernel, the following vulnerability has been resolved: smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). smc_clc_prfx_match() is called from smc_listen_work() and not under RCU nor RTNL. Using sk_dst_get(sk)->dev could trigger UA…
-
High 8.0
Bluetooth: ISO: Fix possible UAF on iso_conn_free
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on iso_conn_free This attempt to fix similar issue to sco_conn_free where if the conn->sk is not set to NULL may lead to UAF on iso_conn_free.
-
High 7.8
drm/vmwgfx: Fix Use-after-free in validation
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes stored in the validation duplicates hashtable come from an arena allocator that is cleared at the end of vmw_execbuf_process. All nodes are …
-
High 7.8
sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara
In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara The referenced commit introduced exception handlers on user-space memory references in copy_from_user and copy_to_us…
-
High 7.8
misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl()
In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl() Commit eefb83790a0d ("misc: pci_endpoint_test: Add doorbell test case") added NO_BAR (-1) to the pci_barno enum which…
-
High 7.8
scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod Since commit f7b705c238d1 ("scsi: pm80xx: Set phy_attached to zero when device is gone") UBSAN reports: UBSAN: array-index-out-of-bound…
-
High 7.8CVE-2025-40123 Public exploit
bpf: Enforce expected_attach_type for tailcall compatibility
In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expected_attach_type for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpf_prog_test_run_xdp() function…
-
High 7.8
sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III
In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III Anthony Yznaga tracked down that a BUG_ON in ext4 code with large folios enabled resulted from copy_from_user…
-
High 7.8
smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().
In the Linux kernel, the following vulnerability has been resolved: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). smc_clc_prfx_set() is called during connect() and not under RCU nor RTNL. Using sk_dst_get(sk)->dev could trigger UAF. Let'…
-
High 7.8
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
In the Linux kernel, the following vulnerability has been resolved: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). get_netdev_for_sock() is called during setsockopt(), so not under RCU. Using sk_dst_get(sk)->dev could trigger UAF. Let's u…
-
High 7.8
LoongArch: BPF: No support of struct argument in trampoline programs
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: No support of struct argument in trampoline programs The current implementation does not support struct argument. This causes a oops when running bpf selftest: $ ./test_progs …
-
High 7.8
xsk: Harden userspace-supplied xdp_desc validation
In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdp_desc validation Turned out certain clearly invalid values passed in xdp_desc from userspace can pass xp_{,un}aligned_validate_desc() and then lead to UBs or…
-
High 7.8
media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: m2m: Fix streaming cleanup on release If streamon/streamoff calls are imbalanced, such as when exiting an application with Ctrl+C when streaming, the m2m usage_count wil…
-
High 7.8
drm/xe/guc: Check GuC running state before deregistering exec queue
In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Check GuC running state before deregistering exec queue In normal operation, a registered exec queue is disabled and deregistered through the GuC, and freed only after the GuC con…
-
High 7.8
ext4: detect invalid INLINE_DATA + EXTENTS flag combination
In the Linux kernel, the following vulnerability has been resolved: ext4: detect invalid INLINE_DATA + EXTENTS flag combination syzbot reported a BUG_ON in ext4_es_cache_extent() when opening a verity file on a corrupted ext4 filesystem mounted without a jour…
-
High 7.8
bpf: Reject negative offsets for ALU ops
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative offsets for ALU ops When verifying BPF programs, the check_alu_op() function validates instructions with ALU operations. The 'offset' field in these instructions is a sig…
-
High 7.8
net: use dst_dev_rcu() in sk_setup_caps()
In the Linux kernel, the following vulnerability has been resolved: net: use dst_dev_rcu() in sk_setup_caps() Use RCU to protect accesses to dst->dev from sk_setup_caps() and sk_dst_gso_max_size(). Also use dst_dev_rcu() in ip6_dst_mtu_maybe_forward(), and ip…
-
High 7.8
accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() Currently, if find_and_map_user_pages() takes a DMA xfer request from the user with a length field set to 0, or in a rar…
-
High 7.8
net/ip6_tunnel: Prevent perpetual tunnel growth
In the Linux kernel, the following vulnerability has been resolved: net/ip6_tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev->needed_headroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5a…
-
High 7.8
x86/mm: Fix SMP ordering in switch_mm_irqs_off()
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix SMP ordering in switch_mm_irqs_off() Stephen noted that it is possible to not have an smp_mb() between the loaded_mm store and the tlb_gen load in switch_mm(), meaning the orderin…
-
High 7.5
sunrpc: fix null pointer dereference on zero-length checksum
In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length checksum In xdr_stream_decode_opaque_auth(), zero-length checksum.len causes checksum.data to be set to NULL. This triggers a NPD when acce…
-
High 7.5
nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmet_fc_ls_req_op It’s possible for more than one async command to be in flight from __nvmet_fc_send_ls_req. For each command, a tgtport reference is taken. I…
-
High 7.3
iommu/vt-d: debugfs: Fix legacy mode page table dump logic
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like…
-
Unscored —
drm/vmwgfx: Fix a null-ptr access in the cursor snooper
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix a null-ptr access in the cursor snooper Check that the resource which is converted to a surface exists before trying to use the cursor snooper on it. vmw_cmd_res_check allows …
-
Unscored —
remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E
In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E The ADSP firmware on X1E has separate firmware binaries for the main firmware and the DTB. The same applies for the "lite" firmware loaded…
-
Unscored —
scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() During mpt3sas_transport_port_remove(), messages were logged with dev_printk() against &mpt3sas_port->port->dev. At this …
-
Unscored —
usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthread_run() function returns error pointers so the max3421_hcd->spi_thread pointer can be either error pointers or…
-
Unscored —
ext4: fix potential null deref in ext4_mb_init()
In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential null deref in ext4_mb_init() In ext4_mb_init(), ext4_mb_avg_fragment_size_destroy() may be called when sbi->s_mb_avg_fragment_size remains uninitialized (e.g., if groupinf…
-
Unscored —
net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock Prevent USB runtime PM (autosuspend) for AX88772* in bind. usbnet enables runtime PM (autosuspend) by default, so disabling …
-
Unscored —
ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver just ignores and leaves as is, which may lead to une…
-
Unscored —
perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error When running perf_fuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32_PMC_x_CFG_B MSRs. [ 55.611…
-
Unscored —
blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx In __blk_mq_update_nr_hw_queues() the return value of blk_mq_sysfs_register_hctxs() is not checked. If sysfs cre…
-
Unscored —
sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC The referenced commit introduced exception handlers on user-space memory references in copy_from_user and copy_to…
-
Unscored —
hwrng: ks-sa - fix division by zero in ks_sa_rng_init
In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in ks_sa_rng_init Fix division by zero in ks_sa_rng_init caused by missing clock pointer initialization. The clk_get_rate() call is performed on an uniniti…
-
Unscored —CVE-2025-40128 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
scsi: ufs: core: Fix data race in CPU latency PM QoS request handling
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling The cpu_latency_qos_add/remove/update_request interfaces lack internal synchronization by design, requiring the caller to…
-
Unscored —
wifi: ath12k: Fix peer lookup in ath12k_dp_mon_rx_deliver_msdu()
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12k_dp_mon_rx_deliver_msdu() In ath12k_dp_mon_rx_deliver_msdu(), peer lookup fails because rxcb->peer_id is not updated with a valid value. This is expecte…
-
Unscored —
ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback In create_sdw_dailink() check that sof_end->codec_info->add_sidecar is not NULL before calling it. The original code assumed th…
-
Unscored —
dm: fix NULL pointer dereference in __dm_suspend()
In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend() There is a race condition between dm device suspend and table load that can lead to null pointer dereference. The issue occurs when suspend …
-
Unscored —
crypto: hisilicon/qm - request reserved interrupt for virtual function
In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - request reserved interrupt for virtual function The device interrupt vector 3 is an error interrupt for physical function and a reserved interrupt for virtual function.…
-
Unscored —
f2fs: fix to truncate first page in error path of f2fs_truncate()
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate first page in error path of f2fs_truncate() syzbot reports a bug as below: loop0: detected capacity change from 0 to 40427 F2FS-fs (loop0): Wrong SSA boundary, start(358…
-
Unscored —
f2fs: fix to avoid NULL pointer dereference in f2fs_check_quota_consistency()
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid NULL pointer dereference in f2fs_check_quota_consistency() syzbot reported a f2fs bug as below: Oops: gen[ 107.736417][ T5848] Oops: general protection fault, probably for …
-
Unscored —
ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on PREEMPT_RT snd_pcm_group_lock_irq() acquires a spinlock_t and disables interrupts via spin_lock_irq(). This also implicitly di…
-
Unscored —
bpf: dont report verifier bug for missing bpf_scc_visit on speculative path
In the Linux kernel, the following vulnerability has been resolved: bpf: dont report verifier bug for missing bpf_scc_visit on speculative path Syzbot generated a program that triggers a verifier_bug() call in maybe_exit_scc(). maybe_exit_scc() assumes that, …
-
Unscored —CVE-2025-40144 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
-
Unscored —
PCI/pwrctrl: Fix double cleanup on devm_add_action_or_reset() failure
In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Fix double cleanup on devm_add_action_or_reset() failure When devm_add_action_or_reset() fails, it calls the passed cleanup function. Hence the caller must not repeat that cleanu…
-
Unscored —
blk-mq: fix potential deadlock while nr_requests grown
In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix potential deadlock while nr_requests grown Allocate and free sched_tags while queue is freezed can deadlock[1], this is a long term problem, hence allocate memory before freezing …
-
Unscored —
blk-throttle: fix access race during throttle policy activation
In the Linux kernel, the following vulnerability has been resolved: blk-throttle: fix access race during throttle policy activation On repeated cold boots we occasionally hit a NULL pointer crash in blk_should_throtl() when throttling is consulted before the …
-
Unscored —
drm/amd/display: Add NULL pointer checks in dc_stream cursor attribute functions
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dc_stream cursor attribute functions The function dc_stream_set_cursor_attributes() currently dereferences the `stream` pointer and nested members …
-
Unscored —
f2fs: fix to avoid migrating empty section
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid migrating empty section It reports a bug from device w/ zufs: F2FS-fs (dm-64): Inconsistent segment (173822) type [1, 0] in SSA and SIT F2FS-fs (dm-64): Stopped filesystem …
-
Unscored —
drm/msm: Fix bootup splat with separate_gpu_drm modparam
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix bootup splat with separate_gpu_drm modparam The drm_gem_for_each_gpuvm_bo() call from lookup_vma() accesses drm_gem_obj.gpuva.list, which is not initialized when the drm driver d…
-
Unscored —
mm: hugetlb: avoid soft lockup when mprotect to large memory area
In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to large memory area When calling mprotect() to a large hugetlb memory area in our customer's workload (~300GB hugetlb memory), soft lockup was ob…
-
Unscored —
ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an error message but leaves as is. This m…
-
Unscored —
PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe()
In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer dereference in probe() The drv->sram_reg pointer could be set to ERR_PTR(-EPROBE_DEFER) which would lead to a error pointer dereference. Use…
-
Unscored —
EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller When loading the i10nm_edac driver on some Intel Granite Rapids servers, a call trace may appear as follows: UBSAN: shift-out…
-
Unscored —
xen/events: Return -EEXIST for bound VIRQs
In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change find_virq() to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUG_ON() from bind_virq_t…
-
Unscored —
mailbox: zynqmp-ipi: Fix SGI cleanup on unbind
In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The driver incorrectly determines SGI vs SPI interrupts by checking IRQ number < 16, which fails with dynamic IRQ allocation. During unbind, thi…
-
Unscored —
ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails devm_kasprintf() may return NULL on memory allocation failure, but the debug message prints cpus->dai_name before checking it…
-
Unscored —
sched/deadline: Stop dl_server before CPU goes offline
In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Stop dl_server before CPU goes offline IBM CI tool reported kernel warning[1] when running a CPU removal operation through drmgr[2]. i.e "drmgr -c cpu -r -q 1" WARNING: CPU: 0…
-
Unscored —
usbnet: Fix using smp_processor_id() in preemptible code warnings
In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smp_processor_id() in preemptible code warnings Syzbot reported the following warning: BUG: using smp_processor_id() in preemptible [00000000] code: dhcpcd/2879 caller is us…
-
Unscored —
idpf: cleanup remaining SKBs in PTP flows
In the Linux kernel, the following vulnerability has been resolved: idpf: cleanup remaining SKBs in PTP flows When the driver requests Tx timestamp value, one of the first steps is to clone SKB using skb_get. It increases the reference counter for that SKB to…
-
Unscored —
accel/qaic: Fix bootlog initialization ordering
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix bootlog initialization ordering As soon as we queue MHI buffers to receive the bootlog from the device, we could be receiving data. Therefore all the resources needed to proce…
Revision history
-
#122
Neue Updates von SUSE aufgenommen
-
#121
Neue Updates von Ubuntu aufgenommen
-
#120
Neue Updates von SUSE aufgenommen
-
#119
Neue Updates von Debian aufgenommen
-
#118
Neue Updates von Debian aufgenommen
-
#117
Neue Updates von SUSE aufgenommen
-
#116
Neue Updates von Oracle Linux und openSUSE aufgenommen
-
#115
Neue Updates von Oracle Linux aufgenommen
-
#114
Neue Updates von IBM und Oracle Linux aufgenommen
-
#113
Neue Updates von Red Hat aufgenommen
-
#112
Neue Updates von Debian und IBM aufgenommen
-
#111
Neue Updates von Debian aufgenommen
-
#110
Neue Updates von Ubuntu aufgenommen
-
#109
Neue Updates von Rocky Enterprise Software Foundation und Oracle Linux aufgenommen
-
#108
Neue Updates von Red Hat aufgenommen
-
#107
Neue Updates von Debian aufgenommen
-
#106
Neue Updates von Red Hat aufgenommen
-
#105
Neue Updates von Dell aufgenommen
-
#104
Neue Updates von SUSE aufgenommen
-
#103
Neue Updates von Ubuntu aufgenommen
-
#102
Neue Updates von SUSE aufgenommen
-
#101
Neue Updates von Amazon aufgenommen
-
#100
Neue Updates von Ubuntu aufgenommen
-
#99
Neue Updates von Ubuntu aufgenommen
-
#98
Neue Updates von IBM aufgenommen
References
-
Kernel CVE Announce Mailingliste
https://lore.kernel.org/linux-cve-announce/
-
Linux Kernel CVE Announcement CVE-2025-40112
https://lore.kernel.org/linux-cve-announce/2025111249-CVE-2025-40112-5c8f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40113
https://lore.kernel.org/linux-cve-announce/2025111251-CVE-2025-40113-ad3d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40115
https://lore.kernel.org/linux-cve-announce/2025111251-CVE-2025-40115-6218@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40116
https://lore.kernel.org/linux-cve-announce/2025111251-CVE-2025-40116-3942@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40118
https://lore.kernel.org/linux-cve-announce/2025111252-CVE-2025-40118-19e2@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40119
https://lore.kernel.org/linux-cve-announce/2025111252-CVE-2025-40119-41e0@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40120
https://lore.kernel.org/linux-cve-announce/2025111252-CVE-2025-40120-8b68@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40121
https://lore.kernel.org/linux-cve-announce/2025111252-CVE-2025-40121-c2ef@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40122
https://lore.kernel.org/linux-cve-announce/2025111252-CVE-2025-40122-6893@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40123
https://lore.kernel.org/linux-cve-announce/2025111253-CVE-2025-40123-fcb1@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40124
https://lore.kernel.org/linux-cve-announce/2025111253-CVE-2025-40124-5006@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40125
https://lore.kernel.org/linux-cve-announce/2025111253-CVE-2025-40125-cb33@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40126
https://lore.kernel.org/linux-cve-announce/2025111253-CVE-2025-40126-a667@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40127
https://lore.kernel.org/linux-cve-announce/2025111253-CVE-2025-40127-361e@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40128
https://lore.kernel.org/linux-cve-announce/2025111253-CVE-2025-40128-2dd9@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40129
https://lore.kernel.org/linux-cve-announce/2025111254-CVE-2025-40129-fbb4@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40130
https://lore.kernel.org/linux-cve-announce/2025111254-CVE-2025-40130-c057@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40131
https://lore.kernel.org/linux-cve-announce/2025111254-CVE-2025-40131-1db8@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40132
https://lore.kernel.org/linux-cve-announce/2025111254-CVE-2025-40132-9d00@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40133
https://lore.kernel.org/linux-cve-announce/2025111254-CVE-2025-40133-4d9d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40134
https://lore.kernel.org/linux-cve-announce/2025111254-CVE-2025-40134-4d24@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40135
https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40135-67ca@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40136
https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40136-9c55@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40137
https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40137-3047@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40138
https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40138-e96d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40139
https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40139-a030@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40140
https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40140-ae1a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40141
https://lore.kernel.org/linux-cve-announce/2025111256-CVE-2025-40141-072e@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40142
https://lore.kernel.org/linux-cve-announce/2025111256-CVE-2025-40142-2655@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40143
https://lore.kernel.org/linux-cve-announce/2025111256-CVE-2025-40143-a4ce@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40144
https://lore.kernel.org/linux-cve-announce/2025111256-CVE-2025-40144-f4bd@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40145
https://lore.kernel.org/linux-cve-announce/2025111256-CVE-2025-40145-9b0c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40146
https://lore.kernel.org/linux-cve-announce/2025111256-CVE-2025-40146-b919@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40147
https://lore.kernel.org/linux-cve-announce/2025111257-CVE-2025-40147-0afa@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40148
https://lore.kernel.org/linux-cve-announce/2025111257-CVE-2025-40148-eef5@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40149
https://lore.kernel.org/linux-cve-announce/2025111257-CVE-2025-40149-2c48@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40150
https://lore.kernel.org/linux-cve-announce/2025111257-CVE-2025-40150-0f36@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40151
https://lore.kernel.org/linux-cve-announce/2025111257-CVE-2025-40151-6cb9@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40152
https://lore.kernel.org/linux-cve-announce/2025111257-CVE-2025-40152-601f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40153
https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40153-c820@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40154
https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40154-fd98@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40155
https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40155-5247@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40156
https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40156-3045@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40157
https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40157-d08c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40158
https://lore.kernel.org/linux-cve-announce/2025111258-CVE-2025-40158-4c9d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40159
https://lore.kernel.org/linux-cve-announce/2025111239-CVE-2025-40159-fe53@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40160
https://lore.kernel.org/linux-cve-announce/2025111239-CVE-2025-40160-b13a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40161
https://lore.kernel.org/linux-cve-announce/2025111239-CVE-2025-40161-8d13@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40162
https://lore.kernel.org/linux-cve-announce/2025111227-CVE-2025-40162-210b@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40163
https://lore.kernel.org/linux-cve-announce/2025111227-CVE-2025-40163-55e0@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40164
https://lore.kernel.org/linux-cve-announce/2025111227-CVE-2025-40164-cbee@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40165
https://lore.kernel.org/linux-cve-announce/2025111227-CVE-2025-40165-872c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40166
https://lore.kernel.org/linux-cve-announce/2025111228-CVE-2025-40166-07ed@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40167
https://lore.kernel.org/linux-cve-announce/2025111228-CVE-2025-40167-184f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40168
https://lore.kernel.org/linux-cve-announce/2025111256-CVE-2025-40168-bdd5@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40169
https://lore.kernel.org/linux-cve-announce/2025111259-CVE-2025-40169-c29b@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40170
https://lore.kernel.org/linux-cve-announce/2025111259-CVE-2025-40170-d39d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40171
https://lore.kernel.org/linux-cve-announce/2025111259-CVE-2025-40171-0cb5@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40172
https://lore.kernel.org/linux-cve-announce/2025111254-CVE-2025-40172-f3b8@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40173
https://lore.kernel.org/linux-cve-announce/2025111254-CVE-2025-40173-4a68@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40174
https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40174-b076@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40175
https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40175-9dd0@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40176
https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40176-f2e3@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40177
https://lore.kernel.org/linux-cve-announce/2025111255-CVE-2025-40177-8961@gregkh/
-
Ubuntu Security Notice USN-7879-2 vom 2025-11-21
https://ubuntu.com/security/notices/USN-7879-2
-
Ubuntu Security Notice USN-7879-1 vom 2025-11-21
https://ubuntu.com/security/notices/USN-7879-1
-
Ubuntu Security Notice USN-7887-1 vom 2025-11-24
https://ubuntu.com/security/notices/USN-7887-1
-
Ubuntu Security Notice USN-7879-3 vom 2025-11-26
https://ubuntu.com/security/notices/USN-7879-3
-
Debian Security Advisory DLA-4379 vom 2025-11-25
https://lists.debian.org/debian-lts-announce/2025/11/msg00022.html
-
Ubuntu Security Notice USN-7887-2 vom 2025-11-25
https://ubuntu.com/security/notices/USN-7887-2
-
Container-Optimized OS release notes vom 2025-12-03
https://docs.cloud.google.com/container-optimized-os/docs/release-notes#December_02_2025
-
Amazon Linux Security Advisory ALAS2KERNEL-5.15-2025-095 vom 2025-12-08
https://alas.aws.amazon.com/AL2/ALAS2KERNEL-5.15-2025-095.html
-
Amazon Linux Security Advisory ALAS2KERNEL-5.15-2025-094 vom 2025-12-08
https://alas.aws.amazon.com/AL2/ALAS2KERNEL-5.15-2025-094.html
-
Oracle Linux Security Advisory ELSA-2025-28049 vom 2025-12-15
https://linux.oracle.com/errata/ELSA-2025-28049.html
-
Oracle Linux Security Advisory ELSA-2025-28048 vom 2025-12-12
https://linux.oracle.com/errata/ELSA-2025-28048.html
-
Oracle Linux Security Advisory ELSA-2025-28049 vom 2025-12-15
https://oss.oracle.com/pipermail/el-errata/2025-December/019260.html
-
Debian Security Advisory DLA-4404 vom 2025-12-12
https://lists.debian.org/debian-lts-announce/2025/12/msg00015.html
-
Ubuntu Security Notice USN-7936-1 vom 2025-12-16
https://ubuntu.com/security/notices/USN-7936-1
-
SUSE Security Update SUSE-SU-2025:4393-1 vom 2025-12-15
https://lists.suse.com/pipermail/sle-security-updates/2025-December/023538.html