PT-2025-14292

🗓️ 26 Feb 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 17 Views

A deadlock in the Linux kernel was fixed by scheduling fence release processing on a workqueue.

Reporter	Title	Published	Views	Family All 16880
BDU FSTEC	The vulnerability of the `scrub_find_fill_first_stripe()` function in the `fs/btrfs/scrub.c` file of the btrfs file system in the Linux operating system allows a hacker to trigger a service failure.	13 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions copy_verifier_state() and do_check() in the kernel/bpf/verifier.c module support the BPF interpreter of the Linux operating system. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	16 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the hfs_bnode_read_key function in Linux kernel-based file system drivers hfs/hfsplus allows a attacker to cause a service failure.	19 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the zpci_device_reserved() function in the arch/s390/pci/pci.c module of the S390 platform support module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	24 Mar 202600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the ath12k_htt_print_tx_selfgen_ac_stats_tlv() function in the drivers/net/wireless/ath/ath12k/debugfs_htt_stats.c module – a driver for Atheros/Qualcomm wireless adapter support in the Linux operating system. This vulnerability allows an attacker to access protected information or cause service failure.	26 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the functions esp_output_tcp_finish() (net/ipv4/esp4.c) and esp_output_tcp_finish() (net/ipv6/esp6.c) in the Linux kernel allows a attacker to cause a service failure.	1 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mlx5r_umr_cleanup() function in the drivers/infiniband/hw/mlx5/umr.c file of the Linux kernel’s InfiniBand support driver allows a malicious actor to cause a service failure.	1 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the hvfb_putmem() function in the drivers/video/fbdev/hyperv_fb.c driver module allows a hacker to cause a service failure.	1 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions mdio_busPhy_suspend() and mdio_bus Phy_resume() in the module drivers/net/phy/phy_device.c of the Linux operating system’s physical-layer PHY driver allow a attacker to cause a service failure.	1 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the amd_set_spi_freq() function in the drivers/spi/spi-amd.c module of the Linux kernel’s SPI device support driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	1 Apr 202600:00	–	bdu_fstec

Source	Link
suse	www.suse.com/security/cve/CVE-2025-37859.html
bdu	www.bdu.fstec.ru/vul/2025-03740
suse	www.suse.com/security/cve/CVE-2025-37959.html
suse	www.suse.com/security/cve/CVE-2024-50293.html
suse	www.suse.com/security/cve/CVE-2025-37788.html
suse	www.suse.com/security/cve/CVE-2025-37816.html
bdu	www.bdu.fstec.ru/vul/2025-11933
bugzilla	www.bugzilla.suse.com/show_bug.cgi
ubuntu	www.ubuntu.com/security/CVE-2025-22044
suse	www.suse.com/security/cve/CVE-2025-37742.html

06 Oct 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.5 - 7.8

EPSS0.65736

SSVC

linux kernel deadlock fix fence release processing recursive locking weston task issue