Summary
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder weitere, nicht spezifizierte Auswirkungen zu erlangen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 53
-
Critical 9.8
net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()
In the Linux kernel, the following vulnerability has been resolved: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() The loops in 'qede_tpa_cont()' and 'qede_tpa_end()', iterate over 'cqe->len_list[]' using only a zero-…
-
Critical 9.8
mptcp: fix a race in mptcp_pm_del_add_timer()
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix a race in mptcp_pm_del_add_timer() mptcp_pm_del_add_timer() can call sk_stop_timer_sync(sk, &entry->add_timer) while another might have free entry already, as reported by syzbot. A…
-
Critical 9.8
mptcp: fix race condition in mptcp_schedule_work()
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race condition in mptcp_schedule_work() syzbot reported use-after-free in mptcp_schedule_work() [1] Issue here is that mptcp_schedule_work() schedules a work, then gets a refcount …
-
Critical 9.8
nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
In the Linux kernel, the following vulnerability has been resolved: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() nvme_fc_delete_assocation() waits for pending I/O to complete before returning, and an error can cause ->ioerr_work to…
-
High 8.8
s390/ctcm: Fix double-kfree
In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpc_rcvd_sweep_req(mpcginfo)' is called conditionally from function 'ctcmpc_unpack_skb'. It frees passed mpcginfo. After that a call to function 'kfr…
-
High 8.2
KVM: arm64: Check the untrusted offset in FF-A memory share
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value [U32_MAX - sizeof(str…
-
High 7.8
af_unix: Initialise scc_index in unix_add_edge().
In the Linux kernel, the following vulnerability has been resolved: af_unix: Initialise scc_index in unix_add_edge(). Quang Le reported that the AF_UNIX GC could garbage-collect a receive queue of an alive in-flight socket, with a nice repro. The repro consis…
-
High 7.8
xfrm: delete x->tunnel as we delete x
In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x->tunnel as we delete x The ipcomp fallback tunnels currently get deleted (from the various lists and hashtables) as the last user state that needed that fallback is destroyed (…
-
High 7.8
io_uring/rsrc: don't rely on user vaddr alignment
In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however the calculation of an offset of the first page into a folio after coalescing uses…
-
High 7.8
ocfs2: clear extent cache after moving/defragmenting extents
In the Linux kernel, the following vulnerability has been resolved: ocfs2: clear extent cache after moving/defragmenting extents The extent map cache can become stale when extents are moved or defragmented, causing subsequent operations to see outdated extent…
-
High 7.8
erofs: fix crafted invalid cases for encoded extents
In the Linux kernel, the following vulnerability has been resolved: erofs: fix crafted invalid cases for encoded extents Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Li…
-
High 7.8
hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
In the Linux kernel, the following vulnerability has been resolved: hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() The syzbot reported issue in hfs_find_set_zero_bits(): ===================================================== BUG: KMSAN: uninit-v…
-
High 7.8
hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() The syzbot reported issue in __hfsplus_ext_cache_extent(): [ 70.194323][ T9350] BUG: KMSAN: uninit-value in __hfsplus_ext…
-
High 7.8
nios2: ensure that memblock.current_limit is set when setting pfn limits
In the Linux kernel, the following vulnerability has been resolved: nios2: ensure that memblock.current_limit is set when setting pfn limits On nios2, with CONFIG_FLATMEM set, the kernel relies on memblock_get_current_limit() to determine the limits of mem_ma…
-
High 7.8
vsock: Ignore signal/timeout on connect() if already established
In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore signal/timeout on connect() if already established During connect(), acting on a signal/timeout by disconnecting an already established socket leads to several issues: 1. connec…
-
High 7.8
gpio: cdev: make sure the cdev fd is still active before emitting events
In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: make sure the cdev fd is still active before emitting events With the final call to fput() on a file descriptor, the release action may be deferred and scheduled on a work queue. …
-
High 7.8
net/mlx5: Clean up only new IRQ glue on request_irq() failure
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Clean up only new IRQ glue on request_irq() failure The mlx5_irq_alloc() function can inadvertently free the entire rmap and end up in a crash[1] when the other threads tries to acc…
-
High 7.8
devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy The function devl_rate_nodes_destroy is documented to "Unset parent for all rate objects". However, it was only calling the driv…
-
High 7.8
Input: imx_sc_key - fix memory corruption on unload
In the Linux kernel, the following vulnerability has been resolved: Input: imx_sc_key - fix memory corruption on unload This is supposed to be "priv" but we accidentally pass "&priv" which is an address in the stack and so it will lead to memory corruption wh…
-
High 7.5
sctp: avoid NULL dereference when chunk data buffer is missing
In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL dereference when chunk data buffer is missing chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only. chunk->skb can only be NULL if chunk->he…
-
High 7.0
gfs2: Fix unlikely race in gdlm_put_lock
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix unlikely race in gdlm_put_lock In gdlm_put_lock(), there is a small window of time in which the DFL_UNMOUNT flag has been set but the lockspace hasn't been released, yet. In that wi…
-
Unscored —
pidfs: validate extensible ioctls
In the Linux kernel, the following vulnerability has been resolved: pidfs: validate extensible ioctls Validate extensible ioctls stricter than we do now.
-
Unscored —
mm/damon/vaddr: do not repeat pte_offset_map_lock() until success
In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success DAMON's virtual address space operation set implementation (vaddr) calls pte_offset_map_lock() inside the page table walk cal…
-
Unscored —
PCI/IOV: Fix race between SR-IOV enable/disable and hotplug
In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Fix race between SR-IOV enable/disable and hotplug Commit 05703271c3cd ("PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV") tried to fix a race between the VF re…
-
Unscored —
fuse: fix livelock in synchronous file put from fuseblk workers
In the Linux kernel, the following vulnerability has been resolved: fuse: fix livelock in synchronous file put from fuseblk workers I observed a hang when running generic/323 against a fuseblk server. This test opens a file, initiates a lot of AIO writes to t…
-
Unscored —
media: pci: mg4b: fix uninitialized iio scan data
In the Linux kernel, the following vulnerability has been resolved: media: pci: mg4b: fix uninitialized iio scan data Fix potential leak of uninitialized stack data to userspace by ensuring that the `scan` structure is zeroed before use.
-
Unscored —
tty: serial: sh-sci: fix RSCI FIFO overrun handling
In the Linux kernel, the following vulnerability has been resolved: tty: serial: sh-sci: fix RSCI FIFO overrun handling The receive error handling code is shared between RSCI and all other SCIF port types, but the RSCI overrun_reg is specified as a memory off…
-
Unscored —
most: usb: Fix use-after-free in hdm_disconnect
In the Linux kernel, the following vulnerability has been resolved: most: usb: Fix use-after-free in hdm_disconnect hdm_disconnect() calls most_deregister_interface(), which eventually unregisters the MOST interface device with device_unregister(iface->dev). …
-
Unscored —
hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc()
In the Linux kernel, the following vulnerability has been resolved: hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc() The driver allocates memory for sensor data using devm_kzalloc(), but did not check if the allocation succeeded. In case of mem…
-
Unscored —
drm/panthor: Fix kernel panic on partial unmap of a GPU VA region
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix kernel panic on partial unmap of a GPU VA region This commit address a kernel panic issue that can happen if Userspace tries to partially unmap a GPU virtual region (aka drm_…
-
Unscored —
firmware: arm_scmi: Account for failed debug initialization
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Account for failed debug initialization When the SCMI debug subsystem fails to initialize, the related debug root will be missing, and the underlying descriptor will be NU…
-
Unscored —
mm/damon/sysfs: dealloc commit test ctx always
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: dealloc commit test ctx always The damon_ctx for testing online DAMON parameters commit inputs is deallocated only when the test fails. This means memory is leaked for every s…
-
Unscored —
mm/damon/sysfs: catch commit test ctx alloc failure
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: catch commit test ctx alloc failure Patch series "mm/damon/sysfs: fix commit test damon_ctx [de]allocation". DAMON sysfs interface dynamically allocates and uses a damon_ctx o…
-
Unscored —
mm/damon/core: fix potential memory leak by cleaning ops_filter in damon_destroy_scheme
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix potential memory leak by cleaning ops_filter in damon_destroy_scheme Currently, damon_destroy_scheme() only cleans up the filter list but leaves ops_filter untouched, which…
-
Unscored —
mm: prevent poison consumption when splitting THP
In the Linux kernel, the following vulnerability has been resolved: mm: prevent poison consumption when splitting THP When performing memory error injection on a THP (Transparent Huge Page) mapped to userspace on an x86 server, the kernel panics with the foll…
-
Unscored —
vsock: fix lock inversion in vsock_assign_transport()
In the Linux kernel, the following vulnerability has been resolved: vsock: fix lock inversion in vsock_assign_transport() Syzbot reported a potential lock inversion deadlock between vsock_register_mutex and sk_lock-AF_VSOCK when vsock_linger() is called. The …
-
Unscored —
rv: Fully convert enabled_monitors to use list_head as iterator
In the Linux kernel, the following vulnerability has been resolved: rv: Fully convert enabled_monitors to use list_head as iterator The callbacks in enabled_monitors_seq_ops are inconsistent. Some treat the iterator as struct rv_monitor *, while others treat …
-
Unscored —
platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers
In the Linux kernel, the following vulnerability has been resolved: platform/x86: alienware-wmi-wmax: Fix NULL pointer dereference in sleep handlers Devices without the AWCC interface don't initialize `awcc`. Add a check before dereferencing it in sleep handl…
-
Unscored —
btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots()
In the Linux kernel, the following vulnerability has been resolved: btrfs: directly free partially initialized fs_info in btrfs_check_leaked_roots() If fs_info->super_copy or fs_info->super_for_commit allocated failed in btrfs_get_tree_subvol(), then no need …
-
Unscored —
virtio-net: zero unused hash fields
In the Linux kernel, the following vulnerability has been resolved: virtio-net: zero unused hash fields When GSO tunnel is negotiated virtio_net_hdr_tnl_from_skb() tries to initialize the tunnel metadata but forget to zero unused rxhash fields. This may leak …
-
Unscored —
fs/notify: call exportfs_encode_fid with s_umount
In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfs_encode_fid with s_umount Calling intotify_show_fdinfo() on fd watching an overlayfs inode, while the overlayfs is being unmounted, can lead to dereferencing NULL ptr.…
-
Unscored —
net/mlx5: Fix IPsec cleanup over MPV device
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec cleanup over MPV device When we do mlx5e_detach_netdev() we eventually disable blocking events notifier, among those events are IPsec MPV events from IB to core. So before…
-
Unscored —
net: phy: micrel: always set shared->phydev for LAN8814
In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: always set shared->phydev for LAN8814 Currently, during the LAN8814 PTP probe shared->phydev is only set if PTP clock gets actually set, otherwise the function will return b…
-
Unscored —
xfs: fix out of bounds memory read error in symlink repair
In the Linux kernel, the following vulnerability has been resolved: xfs: fix out of bounds memory read error in symlink repair xfs/286 produced this report on my test fleet: ================================================================== BUG: KFENCE: out-o…
-
Unscored —
drm/msm: Fix pgtable prealloc error path
In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix pgtable prealloc error path The following splat was reported: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 Mem abort info: ESR = 0x0000000…
-
Unscored —
net: openvswitch: remove never-working support for setting nsh fields
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: remove never-working support for setting nsh fields The validation of the set(nsh(...)) action is completely wrong. It runs through the nsh_key_put_from_nlattr() function th…
-
Unscored —
net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower()
In the Linux kernel, the following vulnerability has been resolved: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() The ethtool tsconfig Netlink path can trigger a null pointer dereference. A call chain such as: tsconfig_prepare_data() -> dev_…
-
Unscored —
xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added
In the Linux kernel, the following vulnerability has been resolved: xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added In commit b441cf3f8c4b ("xfrm: delete x->tunnel as we delete x"), I missed the case where state creat…
-
Unscored —
scsi: sg: Do not sleep in atomic context
In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disab…
-
Unscored —
sched_ext: Fix scx_enable() crash on helper kthread creation failure
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix scx_enable() crash on helper kthread creation failure A crash was observed when the sched_ext selftests runner was terminated with Ctrl+\ while test 15 was running: NIP [c00000…
-
Unscored —
Input: cros_ec_keyb - fix an invalid memory access
In the Linux kernel, the following vulnerability has been resolved: Input: cros_ec_keyb - fix an invalid memory access If cros_ec_keyb_register_matrix() isn't called (due to `buttons_switches_only`) in cros_ec_keyb_probe(), `ckdev->idev` remains NULL. An inva…
-
Unscored —
be2net: pass wrb_params in case of OS2BMC
In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is called with the wrb_params argument being NULL at be_send_pkt_to_bmc() call site. This may lead to dereferencing a NULL p…
-
Unscored —
vfat: fix missing sb_min_blocksize() return value checks
In the Linux kernel, the following vulnerability has been resolved: vfat: fix missing sb_min_blocksize() return value checks When emulating an nvme device on qemu with both logical_block_size and physical_block_size set to 8 KiB, but without format, a kernel …
Revision history
-
#99
Neue Updates von IBM aufgenommen
-
#98
Neue Updates von Oracle Linux aufgenommen
-
#97
Neue Updates von Red Hat aufgenommen
-
#96
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#95
Neue Updates von Red Hat aufgenommen
-
#94
Neue Updates von Dell aufgenommen
-
#93
Neue Updates von SUSE aufgenommen
-
#92
Neue Updates von SUSE aufgenommen
-
#91
Neue Updates von Oracle Linux aufgenommen
-
#90
Neue Updates von Oracle Linux aufgenommen
-
#89
Neue Updates von Rocky Enterprise Software Foundation aufgenommen
-
#88
Neue Updates von Red Hat aufgenommen
-
#87
Neue Updates von IBM aufgenommen
-
#86
Neue Updates von Oracle Linux aufgenommen
-
#85
Neue Updates von Siemens aufgenommen
-
#84
Neue Updates von SUSE aufgenommen
-
#83
Neue Updates von Oracle Linux aufgenommen
-
#82
Neue Updates von SUSE aufgenommen
-
#81
Neue Updates von SUSE aufgenommen
-
#80
Neue Updates von SUSE aufgenommen
-
#79
Neue Updates von SUSE aufgenommen
-
#78
Neue Updates von openSUSE, SUSE und Debian aufgenommen
-
#77
Neue Updates von Oracle Linux aufgenommen
-
#76
Neue Updates von Red Hat aufgenommen
-
#75
Neue Updates von Oracle Linux aufgenommen
References
-
Ubuntu Security Notice USN-7920-2 vom 2025-12-16
https://ubuntu.com/security/notices/USN-7920-2
-
Kernel CVE Announce Mailingliste
https://lore.kernel.org/linux-cve-announce/
-
Linux Kernel CVE Announcement CVE-2025-40214
https://lore.kernel.org/linux-cve-announce/2025120436-CVE-2025-40214-2fc6@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40215
https://lore.kernel.org/linux-cve-announce/2025120438-CVE-2025-40215-0256@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40216
https://lore.kernel.org/linux-cve-announce/2025120417-CVE-2025-40216-d79f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40217
https://lore.kernel.org/linux-cve-announce/2025120450-CVE-2025-40217-d2a6@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40218
https://lore.kernel.org/linux-cve-announce/2025120452-CVE-2025-40218-d4dc@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40219
https://lore.kernel.org/linux-cve-announce/2025120453-CVE-2025-40219-01f2@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40220
https://lore.kernel.org/linux-cve-announce/2025120454-CVE-2025-40220-2127@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40221
https://lore.kernel.org/linux-cve-announce/2025120454-CVE-2025-40221-e3f3@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40222
https://lore.kernel.org/linux-cve-announce/2025120456-CVE-2025-40222-1901@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40223
https://lore.kernel.org/linux-cve-announce/2025120458-CVE-2025-40223-66bd@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40224
https://lore.kernel.org/linux-cve-announce/2025120458-CVE-2025-40224-e7b1@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40225
https://lore.kernel.org/linux-cve-announce/2025120458-CVE-2025-40225-011a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40226
https://lore.kernel.org/linux-cve-announce/2025120458-CVE-2025-40226-4909@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40227
https://lore.kernel.org/linux-cve-announce/2025120459-CVE-2025-40227-33a7@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40228
https://lore.kernel.org/linux-cve-announce/2025120459-CVE-2025-40228-f581@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40229
https://lore.kernel.org/linux-cve-announce/2025120459-CVE-2025-40229-136f@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40230
https://lore.kernel.org/linux-cve-announce/2025120400-CVE-2025-40230-7b9d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40231
https://lore.kernel.org/linux-cve-announce/2025120400-CVE-2025-40231-ae6a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40232
https://lore.kernel.org/linux-cve-announce/2025120400-CVE-2025-40232-a46a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40233
https://lore.kernel.org/linux-cve-announce/2025120401-CVE-2025-40233-adcb@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40234
https://lore.kernel.org/linux-cve-announce/2025120401-CVE-2025-40234-2dbc@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40235
https://lore.kernel.org/linux-cve-announce/2025120401-CVE-2025-40235-4e24@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40236
https://lore.kernel.org/linux-cve-announce/2025120402-CVE-2025-40236-617c@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40237
https://lore.kernel.org/linux-cve-announce/2025120402-CVE-2025-40237-f087@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40238
https://lore.kernel.org/linux-cve-announce/2025120402-CVE-2025-40238-6169@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40239
https://lore.kernel.org/linux-cve-announce/2025120402-CVE-2025-40239-beb9@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40240
https://lore.kernel.org/linux-cve-announce/2025120403-CVE-2025-40240-745a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40241
https://lore.kernel.org/linux-cve-announce/2025120403-CVE-2025-40241-c6ed@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40242
https://lore.kernel.org/linux-cve-announce/2025120403-CVE-2025-40242-8f73@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40243
https://lore.kernel.org/linux-cve-announce/2025120404-CVE-2025-40243-8cca@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40244
https://lore.kernel.org/linux-cve-announce/2025120404-CVE-2025-40244-941b@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40245
https://lore.kernel.org/linux-cve-announce/2025120404-CVE-2025-40245-0e1e@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40246
https://lore.kernel.org/linux-cve-announce/2025120427-CVE-2025-40246-7e80@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40247
https://lore.kernel.org/linux-cve-announce/2025120429-CVE-2025-40247-14ed@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40248
https://lore.kernel.org/linux-cve-announce/2025120430-CVE-2025-40248-506e@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40249
https://lore.kernel.org/linux-cve-announce/2025120430-CVE-2025-40249-3972@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40250
https://lore.kernel.org/linux-cve-announce/2025120430-CVE-2025-40250-fa72@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40251
https://lore.kernel.org/linux-cve-announce/2025120431-CVE-2025-40251-7db7@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40252
https://lore.kernel.org/linux-cve-announce/2025120431-CVE-2025-40252-2d9b@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40253
https://lore.kernel.org/linux-cve-announce/2025120431-CVE-2025-40253-e855@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40254
https://lore.kernel.org/linux-cve-announce/2025120432-CVE-2025-40254-736a@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40255
https://lore.kernel.org/linux-cve-announce/2025120432-CVE-2025-40255-55aa@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40256
https://lore.kernel.org/linux-cve-announce/2025120432-CVE-2025-40256-9de9@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40257
https://lore.kernel.org/linux-cve-announce/2025120433-CVE-2025-40257-53e6@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40258
https://lore.kernel.org/linux-cve-announce/2025120433-CVE-2025-40258-d10d@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40259
https://lore.kernel.org/linux-cve-announce/2025120433-CVE-2025-40259-86e9@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40260
https://lore.kernel.org/linux-cve-announce/2025120433-CVE-2025-40260-41e5@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40261
https://lore.kernel.org/linux-cve-announce/2025120434-CVE-2025-40261-0531@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40262
https://lore.kernel.org/linux-cve-announce/2025120434-CVE-2025-40262-ba54@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40263
https://lore.kernel.org/linux-cve-announce/2025120434-CVE-2025-40263-bfaa@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40264
https://lore.kernel.org/linux-cve-announce/2025120435-CVE-2025-40264-4001@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40265
https://lore.kernel.org/linux-cve-announce/2025120435-CVE-2025-40265-bbb6@gregkh/
-
Linux Kernel CVE Announcement CVE-2025-40266
https://lore.kernel.org/linux-cve-announce/2025120435-CVE-2025-40266-30a1@gregkh/
-
Microsoft Leitfaden für Sicherheitsupdates vom 2025-12-09
https://msrc.microsoft.com/update-guide/
-
Ubuntu Security Notice USN-7920-1 vom 2025-12-10
https://ubuntu.com/security/notices/USN-7920-1
-
Oracle Linux Security Advisory ELSA-2025-28049 vom 2025-12-15
https://linux.oracle.com/errata/ELSA-2025-28049.html
-
Debian Security Advisory DLA-4404 vom 2025-12-12
https://lists.debian.org/debian-lts-announce/2025/12/msg00015.html
-
Oracle Linux Security Advisory ELSA-2025-28066 vom 2025-12-23
https://linux.oracle.com/errata/ELSA-2025-28066.html
-
Amazon Linux Security Advisory ALAS2KERNEL-5.15-2025-096 vom 2026-01-05
https://alas.aws.amazon.com/AL2/ALAS2KERNEL-5.15-2025-096.html
-
Google Cloud Platform Security Bulletin GCP-2026-001 vom 2026-01-07
https://docs.cloud.google.com/support/bulletins#gcp-2026-001
-
Red Hat Security Advisory RHSA-2026:0453 vom 2026-01-12
https://access.redhat.com/errata/RHSA-2026:0453
-
Red Hat Security Advisory RHSA-2026:0444 vom 2026-01-12
https://access.redhat.com/errata/RHSA-2026:0444
-
Red Hat Security Advisory RHSA-2026:0443 vom 2026-01-12
https://access.redhat.com/errata/RHSA-2026:0443
-
Oracle Linux Security Advisory ELSA-2026-0453 vom 2026-01-13
https://linux.oracle.com/errata/ELSA-2026-0453.html
-
Oracle Linux Security Advisory ELSA-2026-0444 vom 2026-01-13
https://linux.oracle.com/errata/ELSA-2026-0444.html
-
Oracle Linux Security Advisory ELSA-2026-0445 vom 2026-01-13
https://linux.oracle.com/errata/ELSA-2026-0445.html
-
Oracle Linux Security Advisory ELSA-2026-50007 vom 2026-01-14
https://linux.oracle.com/errata/ELSA-2026-50007.html
-
Oracle Linux Security Advisory ELSA-2026-50006 vom 2026-01-15
http://linux.oracle.com/errata/ELSA-2026-50006.html
-
Debian Security Advisory DLA-4436 vom 2026-01-14
https://lists.debian.org/debian-lts-announce/2026/01/msg00007.html
-
Rocky Linux Security Advisory RLSA-2026:0453 vom 2026-01-17
https://errata.build.resf.org/RLSA-2026:0453
-
Rocky Linux Security Advisory RLSA-2026:0445 vom 2026-01-17
https://errata.build.resf.org/RLSA-2026:0445
-
Rocky Linux Security Advisory RLSA-2026:0443 vom 2026-01-17
https://errata.build.resf.org/RLSA-2026:0443
-
Rocky Linux Security Advisory RLSA-2026:0444 vom 2026-01-17
https://errata.build.resf.org/RLSA-2026:0444
-
Oracle Linux Security Advisory ELSA-2026-50060 vom 2026-01-19
https://linux.oracle.com/errata/ELSA-2026-50060.html
-
SUSE Security Update SUSE-SU-2026:0263-1 vom 2026-01-23
https://lists.suse.com/pipermail/sle-security-updates/2026-January/023899.html
-
SUSE Security Update SUSE-SU-2026:0278-1 vom 2026-01-23
https://lists.suse.com/pipermail/sle-security-updates/2026-January/023906.html
-
Red Hat Security Advisory RHSA-2026:1148 vom 2026-01-26
https://access.redhat.com/errata/RHSA-2026:1148
-
Red Hat Security Advisory RHSA-2026:1143 vom 2026-01-26
https://access.redhat.com/errata/RHSA-2026:1143