PT-2025-10069

🗓️ 07 Mar 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 6 Views

Linux kernel issue with io uring, potential data corruption from misuse of SQE data access.

Reporter	Title	Published	Views	Family All 17700
bdu_fstec	The vulnerability of the sdw_hda_daiHWParams() function in the sound/soc/sof/intel/hda-dai.c module of the Linux operating system’s SoC audio support module allows a hacker to cause a service failure.	8 Feb 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the RDMA/mlx5 component of the Linux operating system, which allows a hacker to cause a service failure.	9 Feb 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the sja1105_table_delete_entry() function in the drivers/net/dsa/sja1105/sja1105_static_config.c file of the NXP SJA1105 series switch driver for the Linux operating system allows a attacker to access protected information or cause a service failure.	9 Feb 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the ext4_iget_extra inode() function in the fs/ext4/inode.c file of the Ext4 file system in the Linux operating system allows a attacker to access protected information or cause service failures.	10 Feb 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the icp_opal_init() function in the arch/powerpc/sysdev/xics/icp-opal.c module of the PowerPC platform allows a hacker to cause a service failure.	25 Feb 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the xive_irq_bitmap_add() function in the arch/powerpc/sysdev/xive/spapr.c module of the PowerPC platform supports for the Linux operating system allows a hacker to gain unauthorized access to protected information or cause a service failure.	26 Feb 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the new_lockspace() function in the fs/dlm/lockspace.c module, which is part of the Linux kernel’s distributed locking manager support, allows a attacker to cause a service failure.	26 Feb 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the raid1_read_request() function in the drivers/md/raid1.c module of the Linux kernel support for multiple devices (RAID and LVM) allows a hacker to cause a service failure.	26 Feb 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the ath11kpciprobe() function in the drivers/net/wireless/ath/ath11k/pci.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a hacker to cause a service failure.	26 Feb 202600:00	–	bdu_fstec
bdu_fstec	The vulnerability of the ath11k_reg_notifier() function in the drivers/net/wireless/ath/ath11k/reg.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	26 Feb 202600:00	–	bdu_fstec

Source	Link
bugzilla	www.bugzilla.suse.com/1242502
access	www.access.redhat.com/security/cve/CVE-2025-21796
bdu	www.bdu.fstec.ru/vul/2025-11831
bugzilla	www.bugzilla.suse.com/1235729
suse	www.suse.com/security/cve/CVE-2024-57924.html
suse	www.suse.com/security/cve/CVE-2025-21928.html
bdu	www.bdu.fstec.ru/vul/2025-05089
bdu	www.bdu.fstec.ru/vul/2025-02845
bugzilla	www.bugzilla.suse.com/show_bug.cgi
suse	www.suse.com/security/cve/CVE-2025-22116.html

11 Nov 2025 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.8

CVSS 45.7

EPSS0.12727

SSVC

linux kernel vulnerability io uring issue data corruption risk sqe data access