Skip to content
OpenAdvisories
Medium WID-SEC-2026-0009 16 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jan 4, 2026 · Updated Nov 12, 2026 · Revision 42 · de

Vendor: amazon Vendor: Debian Vendor: Dell Vendor: Microsoft Vendor: Oracle Vendor: Siemens Vendor: SUSE Vendor: Ubuntu Product: Avamar Product: Azure Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NetWorker Product: openSUSE Product: SIMATIC S7 Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder um nicht spezifizierte Auswirkungen zu erzielen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 16

  • High 7.8
    CVE-2025-68761

    hfs: fix potential use after free in hfs_correct_next_unused_CNID()

    In the Linux kernel, the following vulnerability has been resolved: hfs: fix potential use after free in hfs_correct_next_unused_CNID() This code calls hfs_bnode_put(node) which drops the refcount and then dreferences "node" on the next line. It's only safe t…

    Linux Linux linux-raspi2 linux-hwe Linux Ubuntu
  • High 7.8
    CVE-2025-68764

    NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags

    In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" fla…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2025-68753

    ALSA: firewire-motu: add bounds check in put_user loop for DSP events

    In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in put_user loop for DSP events In the DSP event handling code, a put_user() loop copies event data. When the user buffer size is not aligned to 4 bytes,…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-68751

    s390/fpu: Fix false-positive kmsan report in fpu_vstl()

    In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Fix false-positive kmsan report in fpu_vstl() A false-positive kmsan report is detected when running ping command. An inline assembly instruction 'vstl' can write varied amount of b…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-68752

    iavf: Implement settime64 with -EOPNOTSUPP

    In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptp_clock_settime() assumes every ptp_clock has implemented settime64(). Stub it with -EOPNOTSUPP to prevent a NULL dereference. The fix is similar …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-68754

    rtc: amlogic-a4: fix double free caused by devm

    In the Linux kernel, the following vulnerability has been resolved: rtc: amlogic-a4: fix double free caused by devm The clock obtained via devm_clk_get_enabled() is automatically managed by devres and will be disabled and freed on driver detach. Manually call…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-68755

    staging: most: remove broken i2c driver

    In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f91…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-68756

    block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock

    In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock blk_mq_{add,del}_queue_tag_set() functions add and remove queues from tagset, the functions make sure that tagset a…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-68757

    drm/vgem-fence: Fix potential deadlock on release

    In the Linux kernel, the following vulnerability has been resolved: drm/vgem-fence: Fix potential deadlock on release A timer that expires a vgem fence automatically in 10 seconds is now released with timer_delete_sync() from fence->ops.release() called on la…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-68758

    backlight: led-bl: Add devlink to supplier LEDs

    In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LED Backlight is a consumer of one or multiple LED class devices, but devlink is currently unable to create correct supplier-producer links whe…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-68759

    wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()

    In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() In rtl8180_init_rx_ring(), memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-68760

    iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show

    In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show In iommu_mmio_write(), it validates the user-provided offset with the check: `iommu->dbg_mmio_offset > iommu->mmio_phys_end - 4`…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-68762

    net: netpoll: initialize work queue before error checks

    In the Linux kernel, the following vulnerability has been resolved: net: netpoll: initialize work queue before error checks Prevent a kernel warning when netconsole setup fails on devices with IFF_DISABLE_NETPOLL flag. The warning (at kernel/workqueue.c:4242 …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-68763

    crypto: starfive - Correctly handle return of sg_nents_for_len

    In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sg_nents_for_len The return value of sg_nents_for_len was assigned to an unsigned long in starfive_hash_digest, causing negative error codes to b…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-68765

    mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()

    In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() In mt7615_mcu_wtbl_sta_add(), an skb sskb is allocated. If the subsequent call to mt76_connac_mcu_alloc_wtbl_req() fails, the functi…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-68766

    irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()

    In the Linux kernel, the following vulnerability has been resolved: irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() If irq_domain_translate_twocell() sets "hwirq" to >= MCHP_EIC_NIRQ (2) then it results in an out of bounds access. The code checks …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Revision history

  1. #42

    Neue Updates von Debian aufgenommen

  2. #41

    Neue Updates von Debian aufgenommen

  3. #40

    Neue Updates von Dell aufgenommen

  4. #39

    Neue Updates von Siemens aufgenommen

  5. #38

    Neue Updates von Oracle Linux aufgenommen

  6. #37

    Neue Updates von Ubuntu aufgenommen

  7. #36

    Neue Updates von Ubuntu aufgenommen

  8. #35

    Neue Updates von Ubuntu aufgenommen

  9. #34

    Neue Updates von Ubuntu aufgenommen

  10. #33

    Neue Updates von Ubuntu aufgenommen

  11. #32

    Neue Updates von Ubuntu aufgenommen

  12. #31

    Neue Updates von Ubuntu aufgenommen

  13. #30

    Neue Updates von Ubuntu aufgenommen

  14. #29

    Neue Updates von Ubuntu aufgenommen

  15. #28

    Neue Updates von Oracle Linux aufgenommen

  16. #27

    Neue Updates von SUSE aufgenommen

  17. #26

    Neue Updates von SUSE aufgenommen

  18. #25

    Neue Updates von Ubuntu aufgenommen

  19. #24

    Neue Updates von SUSE aufgenommen

  20. #23

    Neue Updates von Ubuntu aufgenommen

  21. #22

    Neue Updates von Ubuntu aufgenommen

  22. #21

    Neue Updates von Ubuntu aufgenommen

  23. #20

    Neue Updates von Oracle Linux aufgenommen

  24. #19

    Neue Updates von SUSE und Amazon aufgenommen

  25. #18

    Neue Updates von SUSE und openSUSE aufgenommen

References