PT-2025-18878 · Linux +2 · Linux Kernel +2

🗓️ 07 Nov 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Kernel crash during reboot in recovery mode due to NULL pointer dereference in i40e shutdown function.

Reporter	Title	Published	Views	Family All 18254
BDU FSTEC	The vulnerabilities of the functions hisi_acc_vfiopci_open_device() and hisi_acc_vfiopci_close_device() in the drivers/vfio/pci/hisilicon/hisi_acc_vfiopci.c driver for VFIO device controllers in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.	10 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `security_read_state_kernel()` function in the `security/selinux/ss/services.c` module of the Linux kernel’s security subsystem allows a attacker to trigger a service failure.	16 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions aq_nic_service_timer_cb() and aq_nic_get_stats() in the driver drivers/net/ethernet/aquantia/atlantic/aq_nic.c of the Ethernet network adapter driver for the aQuantia Atlantic chipset in the Linux operating system, which allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information.	16 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions drm_sched_entity_kill_jobs_cb() and drm_sched_entity_kill_jobs() in the drivers/gpu/drm/scheduler/sched_entity.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system allow a malicious actor to cause a service failure.	17 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions list_version_get_needed() and __list_versions() in the drivers/md/dm-ioctl.c file of the Linux operating system’s RAID and LVM device driver module allow a hacker to cause a service failure.	17 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions cifs_close_deferred_file() and cifs_close_all_deferred_files() in the fs/cifs/misc.c file of the Linux kernel’s file system allow a attacker to cause a service failure.	19 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the netlinkpolicydump_add_policy() function in the net/netlink/policy.c module exposes the ability for a hacker to cause a service failure. This vulnerability relates to the NETLINK interface support for session monitoring in Linux kernel.	19 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the hfs_bnode_read_key function in Linux kernel-based file system drivers hfs/hfsplus allows a attacker to cause a service failure.	19 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ext4_load_journal() function in the fs/ext4/super.c file of the Ext4 file system in the Linux operating system allows a hacker to cause a service failure.	23 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the seg6_hmac_init() function in the net/ipv6/seg6_hmac.c module of the Linux operating system allows a hacker to cause a service failure.	24 Mar 202600:00	–	bdu_fstec

Source	Link
github	www.github.com/pray77/CVE-2023-3640
bdu	www.bdu.fstec.ru/vul/2025-01684
bdu	www.bdu.fstec.ru/vul/2023-03495
bdu	www.bdu.fstec.ru/vul/2023-02163
bdu	www.bdu.fstec.ru/vul/2023-05369
bdu	www.bdu.fstec.ru/vul/2025-06245
bdu	www.bdu.fstec.ru/vul/2025-06233
bdu	www.bdu.fstec.ru/vul/2025-06338
ubuntu	www.ubuntu.com/security/CVE-2023-53114
bdu	www.bdu.fstec.ru/vul/2025-03943

09 Jul 2025 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 22.1

CVSS 3.18.2 - 8.8

CVSS 45.7

EPSS0.16642

SSVC