PT-2025-20499

🗓️ 25 Mar 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 10 Views

Linux kernel faces a potential deadlock issue during runtime resume/suspend with IOCTLs in progress.

Reporter	Title	Published	Views	Family All 16748
BDU FSTEC	The vulnerability of the mtk_vcodec_fw_scp_init() function in the driver/media/platform/mediatek/vcodec/common/mtk_vcodec_fw_scp.c file of the Linux kernel-based multimedia device support driver allows a attacker to cause a service failure.	2 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the vmxnet3_process_xdp() function in the drivers/net/vmxnet3/vmxnet3_xdp.c file of the Linux kernel network device driver allows a attacker to cause a service failure.	3 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the tegra241cmdqv_init_structures() function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux operating system’s IOMMU kernel driver allows a attacker to cause a service failure.	4 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `arm64_mops_reset regs()` function in the `arch/arm64/include/asm/traps.h` file of the Linux operating system allows a hacker to trigger a service failure.	4 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the dst_count_dec() function in the net/core/dst.c module, a support for network functions in the Linux kernel, allows a hacker to cause a service failure.	6 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions vhost_scsi_set_endpoint() and vhost_scsi_clear_endpoint() in the drivers/vhost/scsi.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.	6 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the xhci_write_64() function in the drivers/usb/host/xhci.h module of the Linux device support driver for USB chipsets allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	6 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the `drivers/net/wireless/ath/ath12k/mac.c` component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.	10 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `scrub_find_fill_first_stripe()` function in the `fs/btrfs/scrub.c` file of the btrfs file system in the Linux operating system allows a hacker to trigger a service failure.	13 Mar 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions copy_verifier_state() and do_check() in the kernel/bpf/verifier.c module support the BPF interpreter of the Linux operating system. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	16 Mar 202600:00	–	bdu_fstec

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi
ubuntu	www.ubuntu.com/security/CVE-2025-22038
ubuntu	www.ubuntu.com/security/CVE-2025-22101
bdu	www.bdu.fstec.ru/vul/2025-11625
suse	www.suse.com/security/cve/CVE-2024-50293.html
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bdu	www.bdu.fstec.ru/vul/2025-08793
ubuntu	www.ubuntu.com/security/CVE-2025-22091
ubuntu	www.ubuntu.com/security/CVE-2025-22104

17 Nov 2025 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.5 - 7.8

EPSS0.37115

SSVC

linux kernel issue deadlock vulnerability runtime suspend ms ioctls no fix available